a61902688242806130096e0f0b34502b_JaffaCakes118

General

Target

a61902688242806130096e0f0b34502b_JaffaCakes118
Size

150KB
MD5

a61902688242806130096e0f0b34502b
SHA1

8e1da81a1404a336fb4ef7f53e326069504b31d3
SHA256

090e4f9935a009a4cb2f7f62b2f0bd56af212687afa812a7a6ee345a4c4c4a7c
SHA512

89819d1b6c6dc6bc121dfb9aed5598a858c545f8e09a886868025498c431b321c3864b51ad6a4f2f74e9f731ff0fdc0ff2463649da38da85075dc0866c1f55d9
SSDEEP

3072:5SXtFUnZ+zxKQS+bAleKai3ezEqxQNeD+bHnT0i9Na:oXtynZ+zxK9yi3mA0i+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a61902688242806130096e0f0b34502b_JaffaCakes118

Files

a61902688242806130096e0f0b34502b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d596ee1c2680d926f5d43d1500e6aee7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext
CryptAcquireContextW
RegDeleteKeyW
SetFileSecurityW
OpenThreadToken
CheckTokenMembership

gdi32

CopyMetaFileA
CreateMetaFileA

kernel32

GetConsoleInputWaitHandle
lstrcpyA
GetLogicalDrives
InterlockedIncrement
GetSystemDirectoryA
_lclose
GetModuleFileNameA
GetWindowsDirectoryA
DeleteFileA
lstrcatA
CreateDirectoryA
InterlockedDecrement
CompareFileTime
FindFirstChangeNotificationW
lstrcpyA
GetFileSizeEx
_lopen
LockFile
FindClose
lstrlenA
CopyFileA
RemoveDirectoryA
lstrcatA
FindNextFileA
MapViewOfFile
SetFileAttributesA
lstrcmpA
Sleep
SearchPathA
GetProfileIntA
HeapSetInformation
HeapDestroy
SystemTimeToFileTime
CancelIo
OutputDebugStringW
_llseek
GetUserDefaultUILanguage
FindFirstFileA
SetTapeParameters
WritePrivateProfileStringA
LocalFree
GetComputerNameExW
GetCurrentProcess

user32

MessageBeep
LoadStringA
SetDlgItemTextA
GetDesktopWindow
GetSystemMetrics
EndDialog

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d596ee1c2680d926f5d43d1500e6aee7

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

user32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 6KB - Virtual size: 9KB

.rsrc Size: 2KB - Virtual size: 1KB

.rdata Size: 134KB - Virtual size: 139KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 6KB - Virtual size: 9KB

.rsrc
Size: 2KB - Virtual size: 1KB

.rdata
Size: 134KB - Virtual size: 139KB