8bee7a2f537b0e92aa41daae91e8a2dd_JaffaCakes118

General

Target

8bee7a2f537b0e92aa41daae91e8a2dd_JaffaCakes118
Size

181KB
MD5

8bee7a2f537b0e92aa41daae91e8a2dd
SHA1

f7c8feda0232c32cc160497c87ac1b4550fe1871
SHA256

2ecba46ed997325ea48b3810d5f8221f1695a730a07ce7a2b2395fd5b511041e
SHA512

63ebb3bb29f4f31956be871ba2b32fc934b2b7d4bb21577e7a08285d6be2f53157f1ed8c31821be0d907ac2d67258301cdb72c8e83300f5450da0e29b452034c
SSDEEP

3072:Gxl1HO4NAPPrQv93zKRKtgI0H97iBAdjUYy6N7GaUnzyI5dTjfREoOuQHOOZzo:GbdO4ePPa3zdkH9kAd5N7GhnHtjfREo8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bee7a2f537b0e92aa41daae91e8a2dd_JaffaCakes118

Files

8bee7a2f537b0e92aa41daae91e8a2dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

015cb18c54b874a2e710324a99ec2d84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LCMapStringW
GetLastError
GetThreadPriority
HeapFree
WideCharToMultiByte
GetCurrentThreadId
WriteConsoleW
SetEndOfFile
LeaveCriticalSection
SetUnhandledExceptionFilter
HeapSize
SetCommConfig
IsValidCodePage
InterlockedIncrement
GetModuleFileNameW
LCMapStringA
EnumSystemLocalesA
GlobalAlloc
GetUserDefaultLCID
EnterCriticalSection
GetLocaleInfoW
RaiseException
GetVersionExA
GetConsoleOutputCP
EnumResourceNamesA
GetCurrentDirectoryW
CloseHandle
DeleteCriticalSection
ReadFile
WriteConsoleA
GetModuleHandleA
InterlockedDecrement
GetFullPathNameW
SetStdHandle
MultiByteToWideChar
ExitProcess
GetProcessHeap
HeapReAlloc
TerminateProcess
GetCommandLineA
UnhandledExceptionFilter
GetCPInfo
InitializeCriticalSection
CreateFileA
WriteFile
RtlUnwind
IsDebuggerPresent
GetProcAddress
GetCurrentProcess
IsValidLocale
HeapAlloc
Sleep
ExitProcess
GetFullPathNameA

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

user32

GetClassLongA
MessageBoxW

rpcrt4

UuidCreate

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

015cb18c54b874a2e710324a99ec2d84

Headers

File Characteristics

Imports

kernel32

shell32

advapi32

user32

rpcrt4

Sections

.text Size: 150KB - Virtual size: 149KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 27KB - Virtual size: 27KB

.crt Size: 512B - Virtual size: 220KB

.text
Size: 150KB - Virtual size: 149KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 27KB - Virtual size: 27KB

.crt
Size: 512B - Virtual size: 220KB