bdd2397653a3788903e7dc7508a11db0_JaffaCakes118

General

Target

bdd2397653a3788903e7dc7508a11db0_JaffaCakes118
Size

174KB
MD5

bdd2397653a3788903e7dc7508a11db0
SHA1

54a67ed8128ad3231c70fdf4f27cce6ea66939d3
SHA256

0cfeb94f7210caf97971c9cadf9ebefe2ec08f4c7227c8a8526536312c1536bd
SHA512

e1f26f26be69e9add513c06a7478f30e4f8d7dcb33ca35a3a1a8f966854b34dca19cc8cc4264ef2f76f76869248e195bea1660cc91f82ab71487546783c4cd85
SSDEEP

3072:olKGr8kp1xU5mZGT8xj/lYdeaRIetRqhHiPVVrmYbEG2ojAmEI+2:olnp1x+qY8jMeF+7rmPoZ02

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdd2397653a3788903e7dc7508a11db0_JaffaCakes118

Files

bdd2397653a3788903e7dc7508a11db0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce7366088dcbc42f256e351f22de22a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

ole32

CoTaskMemAlloc
CoRegisterClassObject
CoCreateInstance
CoUninitialize
CoInitialize
StringFromGUID2
CoRevokeClassObject
CoTaskMemRealloc
CoTaskMemFree
StringFromCLSID

advapi32

RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegSetValueExW

shlwapi

PathCombineW
PathFileExistsW

kernel32

GlobalAlloc
lstrlenW
FillConsoleOutputCharacterA
WideCharToMultiByte
GlobalFree
InitializeCriticalSection
GetProcessWorkingSetSize
lstrcpyW
GetCPInfo
CreateFileMappingW
LockResource
GetTickCount
EnumResourceNamesA
FindClose
GetLastError
FreeEnvironmentStringsW
lstrcpyA
OutputDebugStringW
GetACP
MultiByteToWideChar
lstrcmpiW
GetModuleHandleW

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

SendMessageA
SetTimer
GetMessageW
CharNextW
TranslateMessage
CharUpperW
wsprintfW
DispatchMessageW
KillTimer
GetDC
PostThreadMessageW
UnregisterClassA

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce7366088dcbc42f256e351f22de22a6

Headers

File Characteristics

Imports

ole32

advapi32

shlwapi

kernel32

oleacc

user32

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 66KB - Virtual size: 66KB

.isete Size: 1024B - Virtual size: 120KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 66KB - Virtual size: 66KB

.isete
Size: 1024B - Virtual size: 120KB