ade86feaa34df4f150e7d18eda007029_JaffaCakes118

General

Target

ade86feaa34df4f150e7d18eda007029_JaffaCakes118
Size

158KB
MD5

ade86feaa34df4f150e7d18eda007029
SHA1

7d13e0bb41190bd68540f9603fe937b7140b65ba
SHA256

b1592e1d12a5f6fc9464a87a36372d2de4c61ca66f748a08c8e9fec24dfdb337
SHA512

f5960eb43098172f6c478da7f6cca770178e22bd6ac4d98f759fe114b686b104b1f912165ff60b08fbe11d24867448cac5cddc9b1784c6a1e81e4481d7a81305
SSDEEP

3072:nEZgyDKiX6uFS7ZAyJZkF831/70GnIpQOpKaS29+AMGuby/dss:PE/NFSS4Zk2iaOvS6syB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ade86feaa34df4f150e7d18eda007029_JaffaCakes118

Files

ade86feaa34df4f150e7d18eda007029_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9e725aaabc5e0bf4499be9b1da4dc7de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

user32

wsprintfA
CharNextA
LoadStringA
MessageBoxA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

InitializeCriticalSection
lstrlenW
SetHandleInformation
EnterCriticalSection
CreatePipe
WideCharToMultiByte
GetStartupInfoA
lstrcmpiA
MultiByteToWideChar
CreateJobSet
GetSystemDirectoryA
LoadResource
LeaveCriticalSection
LoadLibraryExA
lstrlenA
GetTickCount
GetModuleFileNameA
CreateProcessA
RaiseException
QueryPerformanceCounter
OutputDebugStringA
lstrcpynA
CloseHandle
WriteFile
GetThreadLocale
GetVersionExA
InterlockedDecrement
MoveFileA
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleA
CreateFileA
IsDBCSLeadByte
InterlockedExchange
LockResource
GetLocaleInfoA
DeleteFileA
ExitProcess
lstrcatA
SetVolumeLabelA
OpenSemaphoreA
GetProcAddress
DeleteCriticalSection
FreeLibrary
GetSystemTimeAsFileTime
ReadFile
SizeofResource
GetLastError
InterlockedIncrement
GetShortPathNameA
FindResourceA
GetACP

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sssa
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 139KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e725aaabc5e0bf4499be9b1da4dc7de

Headers

File Characteristics

Imports

advapi32

user32

version

kernel32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 119KB

.sssa Size: 3KB - Virtual size: 3KB

.edata Size: 139KB - Virtual size: 251KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 119KB

.sssa
Size: 3KB - Virtual size: 3KB

.edata
Size: 139KB - Virtual size: 251KB