ced794c92d3e4a90d43a3966400faebf_JaffaCakes118

General

Target

ced794c92d3e4a90d43a3966400faebf_JaffaCakes118
Size

49KB
MD5

ced794c92d3e4a90d43a3966400faebf
SHA1

29a2da4a3911e3f428d365032aee4f1519f04a6b
SHA256

79f45f4b70bf7cec5ca1849bbf6a2187194f0a375cc77b4ae7206100d10baf29
SHA512

166d45f0408c4d65ab9829b66a50eea7fe03fe5165f515e816c61fa1140d7b86dd9785d76ce75d6d3ac7cfe4c9b2b2491d2a0e8b5eacab1b43e8a7956baf0e02
SSDEEP

768:j73REcsNr6pJG2LfXL/n41TC4tRe0o4oE4WToNscPBQ3zgq6fhwJaa5Y:HB4aG2DXLPy24y0oFWsNFPBQ3zwh45Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ced794c92d3e4a90d43a3966400faebf_JaffaCakes118

Files

ced794c92d3e4a90d43a3966400faebf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ece1a7b25486dedd6153ac18ba5c5f95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

EnableEUDC

kernel32

GetVersionExW
LoadLibraryExA
CreateSemaphoreW
FreeLibrary
VirtualAlloc
VirtualFree
FlushFileBuffers
Sleep
GetCurrentProcess
GetModuleHandleW
GetProcAddress
GetACP
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
HeapSize
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
CloseHandle

user32

ShowWindow
GetDesktopWindow
MessageBoxW

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegDeleteValueW

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ece1a7b25486dedd6153ac18ba5c5f95

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

user32

advapi32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 15KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 15KB