b2fe7ca9e36afd1151a6c4901d08e240_JaffaCakes118

General

Target

b2fe7ca9e36afd1151a6c4901d08e240_JaffaCakes118
Size

418KB
MD5

b2fe7ca9e36afd1151a6c4901d08e240
SHA1

a557d8c1b480935601a7af3a4d98f35471db345a
SHA256

56025b9b13cd47b958c365e9358b6ada79f98f1e0ee58a406f5d4578d1a53469
SHA512

3aa28bfcccfbcfa6878bd2408b8b84b0f9855c233a3a63a2058e953845f8340817be7e563d60c62b9c94576120663712c513d7926a68a51d8cbb5f9468f795ec
SSDEEP

3072:BV2/Mddk8tOGkBNs3kYS2oCxdaGeZhA+B0AvQpJz5fqQqi5WNvBAqa9zxsFummgR:72/cekCrDjb4tEnvh04l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2fe7ca9e36afd1151a6c4901d08e240_JaffaCakes118

Files

b2fe7ca9e36afd1151a6c4901d08e240_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5193b514af5a0e3c00992f9f19007c29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
MoveFileA
WriteFile
lstrcpyA
GetWindowsDirectoryA
FreeLibrary
LoadLibraryA
GetCurrentDirectoryA
GetTempPathA
GetModuleFileNameA
CheckRemoteDebuggerPresent
ContinueDebugEvent
WaitForDebugEvent
CreateProcessA
IsDebuggerPresent
LocalAlloc
LocalFree
lstrcmpA
GetSystemDirectoryA
lstrcatA
CreateFileA
CloseHandle
GetCurrentProcess
lstrlenA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
SetUnhandledExceptionFilter
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
UnhandledExceptionFilter
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

MessageBoxA

advapi32

RegSetValueExA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data2
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5193b514af5a0e3c00992f9f19007c29

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 31KB - Virtual size: 30KB

.data2 Size: 26KB - Virtual size: 25KB

.rsrc Size: 360KB - Virtual size: 360KB

.text
Size: 31KB - Virtual size: 30KB

.data2
Size: 26KB - Virtual size: 25KB

.rsrc
Size: 360KB - Virtual size: 360KB