b475e5d7c4402a57e25cf418b2f2ddc5_JaffaCakes118

General

Target

b475e5d7c4402a57e25cf418b2f2ddc5_JaffaCakes118
Size

169KB
MD5

b475e5d7c4402a57e25cf418b2f2ddc5
SHA1

5e66d319b336cb3ad1d9ae290742365eb6f768a3
SHA256

900978d55667ad79fe11d193d00822b5359fafe2726f9359f81332173b0ec442
SHA512

613a8d18abbbe1c8c273192c50ff2a7120a8734cee482bb8a6153995cdecd926c51da09548a74250e25f8d824263a9a3e11ad61ef75df67c73f4c9b2a7d9d2f9
SSDEEP

3072:qlnLPV0bgNVZ7lZimggJ57lyrEquWN5tQ57ziAx5ClB:qlh0MimB5IELSGOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b475e5d7c4402a57e25cf418b2f2ddc5_JaffaCakes118

Files

b475e5d7c4402a57e25cf418b2f2ddc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55dd31bf44ae1e8d52c0271ddd5140c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetClassLongA
MessageBoxW

rpcrt4

UuidCreate

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

kernel32

UnhandledExceptionFilter
InterlockedIncrement
GetFullPathNameW
HeapSize
GetThreadPriority
Sleep
CreateFileA
GetCurrentThreadId
GetCurrentDirectoryW
LeaveCriticalSection
WriteConsoleA
WriteFile
SetUnhandledExceptionFilter
GetModuleFileNameW
IsDebuggerPresent
RaiseException
SetCommConfig
MultiByteToWideChar
TerminateProcess
LCMapStringW
WideCharToMultiByte
HeapReAlloc
EnumResourceNamesA
WriteConsoleW
ExitProcess
HeapFree
GetUserDefaultLCID
GetCommandLineA
EnterCriticalSection
GetCurrentProcess
GetLocaleInfoW
CloseHandle
HeapAlloc
DeleteCriticalSection
GlobalAlloc
IsValidCodePage
SetStdHandle
GetLastError
ExitProcess
GetConsoleOutputCP
GetCPInfo
GetProcAddress
SetEndOfFile
RtlUnwind
InitializeCriticalSection
GetVersionExA
EnumSystemLocalesA
IsValidLocale
GetModuleHandleA
ReadFile
InterlockedDecrement
LCMapStringA
GetProcessHeap
GetFullPathNameA

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55dd31bf44ae1e8d52c0271ddd5140c6

Headers

File Characteristics

Imports

user32

rpcrt4

shell32

kernel32

advapi32

Sections

.text Size: 145KB - Virtual size: 145KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 20KB - Virtual size: 20KB

.crt Size: 512B - Virtual size: 68KB

.text
Size: 145KB - Virtual size: 145KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 20KB - Virtual size: 20KB

.crt
Size: 512B - Virtual size: 68KB