889234aed4d2394d280138dcc2dce5d2_JaffaCakes118

General

Target

889234aed4d2394d280138dcc2dce5d2_JaffaCakes118
Size

88KB
MD5

889234aed4d2394d280138dcc2dce5d2
SHA1

0ebe370031c536e456b2905e05495564248bdf83
SHA256

cdd5f1a7640a0eca83efcfbe54c3bfe846550236efd601432f0fa1b082640582
SHA512

6d6a0f1a2dd9eb7be99b5bee8c415b5db0ab309b2cca55f87f202eaf02cbf2ebdf9014c97ae0b0433bc5ca5b125a125fca0d5c335eaf14b9cdee92b7214fabad
SSDEEP

1536:gw0NP9sqyf1g5joRGwuqv+VdMXhYBxraYCVGornMUs8XFKdQzQLwf:kF9dyfMjoRKqv+VdMXhYBx2Y2GanM9cf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
889234aed4d2394d280138dcc2dce5d2_JaffaCakes118

Files

889234aed4d2394d280138dcc2dce5d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df7dcad2c36417967ae219238c8a716f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetWindowsDirectoryA
HeapReAlloc
FreeEnvironmentStringsW
WideCharToMultiByte
FlushFileBuffers
GetStringTypeW
CloseHandle
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
SetFilePointer
GetCPInfo
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetLastError
LoadLibraryA
SetStdHandle
GetACP
GetOEMCP
GetProcAddress
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetStringTypeA

user32

ExitWindowsEx
MessageBoxA

advapi32

RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA

shell32

ShellExecuteA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

df7dcad2c36417967ae219238c8a716f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 60KB - Virtual size: 68KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 60KB - Virtual size: 68KB