a7c6896317f28a6f026aad35b355440a_JaffaCakes118

General

Target

a7c6896317f28a6f026aad35b355440a_JaffaCakes118
Size

162KB
MD5

a7c6896317f28a6f026aad35b355440a
SHA1

787d7cc2a09fc5add18820b9310348f0c6e5dee0
SHA256

c07af44907488334891c6c2945061a4ce994eb74a2d4d6fcd94cade3882f4bab
SHA512

5f8639d7b406328a1909f94d0fa512002cf586b360e923be7c3808d43cd5d01932ea01881cc42aafa8a2f95db218186bfa24b28e17ec57c0fd4e084aa5b37fe4
SSDEEP

3072:KcRVBrdcMdKSbBFd0F4Ix215Fo70GoDtJO9VXqGzJBRfH:tPyBSbB7Ix2po70tO9koRfH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7c6896317f28a6f026aad35b355440a_JaffaCakes118

Files

a7c6896317f28a6f026aad35b355440a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38873715a7f99c8e9b349f5a6cf3bcd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetClassLongA
MessageBoxW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

rpcrt4

UuidCreate

kernel32

WriteConsoleW
DeleteCriticalSection
EnumSystemLocalesA
IsValidLocale
WriteFile
TerminateProcess
GetThreadPriority
UnhandledExceptionFilter
GetModuleHandleA
IsValidCodePage
HeapSize
GlobalAlloc
GetCurrentProcess
LCMapStringA
SetCommConfig
IsDebuggerPresent
GetConsoleOutputCP
ExitProcess
HeapAlloc
GetCommandLineA
GetCPInfo
Sleep
CloseHandle
InitializeCriticalSection
GetModuleFileNameW
WideCharToMultiByte
EnumResourceNamesA
ReadFile
GetProcessHeap
GetLocaleInfoW
InterlockedDecrement
HeapReAlloc
EnterCriticalSection
RaiseException
InterlockedIncrement
HeapFree
LCMapStringW
GetCurrentThreadId
GetUserDefaultLCID
SetStdHandle
ExitProcess
MultiByteToWideChar
RtlUnwind
WriteConsoleA
SetUnhandledExceptionFilter
GetLastError
LeaveCriticalSection
CreateFileA
SetEndOfFile
GetProcAddress
GetVersionExA
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38873715a7f99c8e9b349f5a6cf3bcd2

Headers

File Characteristics

Imports

user32

shell32

advapi32

rpcrt4

kernel32

Sections

.text Size: 131KB - Virtual size: 131KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 27KB - Virtual size: 27KB

.crt Size: 512B - Virtual size: 76KB

.text
Size: 131KB - Virtual size: 131KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 27KB - Virtual size: 27KB

.crt
Size: 512B - Virtual size: 76KB