8eb3126111b92617239bffaa4816cff0_JaffaCakes118

General

Target

8eb3126111b92617239bffaa4816cff0_JaffaCakes118
Size

88KB
MD5

8eb3126111b92617239bffaa4816cff0
SHA1

b2675bf9e62131037bcad92ad3e9eb76b57f221e
SHA256

cc069686a23d5dfe94d8d9c8bcfc98a0150332cbb4dd1e0b0a757b12d44d71f4
SHA512

1c0d985fd35b73a7e669cd197c507a142fa4fb972aac12ee32461af30448e48bf2a7bccdd499611446929b7c47c14d7999f7daf7f32b51fbe190a34353832bdb
SSDEEP

768:yyeJ3SQgnn3HOcdMhXmcg42eXu6MvEJGrAHDD1OctGEMvjJe6paMWXR:y/3kn3OcdMNg0Xu6cAGrA/sscsRVB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eb3126111b92617239bffaa4816cff0_JaffaCakes118

Files

8eb3126111b92617239bffaa4816cff0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48d4b927d18c3d1439a3e4044dae0950

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

lstrcatA
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
GetWindowsDirectoryA
lstrcmpiA
DeleteFileA
TerminateProcess
GetCPInfo
GetEnvironmentStringsW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
GetProcAddress
VirtualAlloc
LoadLibraryA
ReadFile
CreateFileA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
SetHandleCount
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetFilePointer
HeapCreate
GetACP
GetOEMCP
VirtualFree
GetStdHandle
GetFileType
HeapDestroy
GetLastError
RtlUnwind
WriteFile
HeapFree
CloseHandle

oleaut32

SysFreeString

ole32

CoUninitialize
CoInitialize
CoCreateInstance

user32

EnableMenuItem
GetSystemMenu
DispatchMessageA
SendDlgItemMessageA
PeekMessageA
DestroyWindow
MessageBoxA
CreateDialogParamA
LoadStringA

comctl32

ord17

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

48d4b927d18c3d1439a3e4044dae0950

Headers

File Characteristics

Imports

advapi32

kernel32

oleaut32

ole32

user32

comctl32

Sections

.text Size: 32KB - Virtual size: 29KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 36KB - Virtual size: 36KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 36KB - Virtual size: 36KB