d27866fde6162282936a7c8a51e137db_JaffaCakes118

General

Target

d27866fde6162282936a7c8a51e137db_JaffaCakes118
Size

173KB
MD5

d27866fde6162282936a7c8a51e137db
SHA1

df86f1859a95c6b3752fcf74b9b5f6031ac4532f
SHA256

c13dde77b61440508f34ebe7ff8e8e1da1d98d9901f49e322df625baca784638
SHA512

80998f2642ad2dc74113d92e7a7810235ceeede6787ec8aa695fa150b459a1c43fec09a36805ec13a933c839ded2bc1b1274d182b993a667768d096ea75cb4c1
SSDEEP

3072:ski6tcPd4StHLgnmrwJIH9KihCKHMfovbcyRcaRB0Gni7WAtu0C5ELU4nnwmJkmF:lf8H1rwJIdlBcy2aRFi7WE65ELnB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d27866fde6162282936a7c8a51e137db_JaffaCakes118

Files

d27866fde6162282936a7c8a51e137db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95ed99dcb5673cd3747edb2ad67681d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

rpcrt4

UuidCreate

kernel32

GetCommandLineA
GetCurrentThreadId
GetCurrentDirectoryW
GetThreadPriority
UnhandledExceptionFilter
InterlockedDecrement
GetLocaleInfoW
GetModuleHandleA
GetCurrentProcess
IsValidLocale
EnterCriticalSection
IsDebuggerPresent
GetProcAddress
InitializeCriticalSection
WriteFile
Sleep
SetCommConfig
LeaveCriticalSection
HeapReAlloc
HeapAlloc
MultiByteToWideChar
TerminateProcess
GlobalAlloc
GetProcessHeap
EnumSystemLocalesA
GetVersionExA
GetFullPathNameW
RaiseException
ReadFile
EnumResourceNamesA
LCMapStringW
CloseHandle
HeapFree
ExitProcess
GetLastError
WideCharToMultiByte
LCMapStringA
InterlockedIncrement
GetConsoleOutputCP
GetCPInfo
SetUnhandledExceptionFilter
GetModuleFileNameW
WriteConsoleW
SetEndOfFile
IsValidCodePage
ExitProcess
GetUserDefaultLCID
RtlUnwind
DeleteCriticalSection
HeapSize
CreateFileA
WriteConsoleA
SetStdHandle
GetFullPathNameA

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

user32

GetClassLongA
MessageBoxW

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95ed99dcb5673cd3747edb2ad67681d5

Headers

File Characteristics

Imports

shell32

rpcrt4

kernel32

advapi32

user32

Sections

.text Size: 140KB - Virtual size: 140KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 29KB - Virtual size: 28KB

.crt Size: 512B - Virtual size: 212KB

.text
Size: 140KB - Virtual size: 140KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 29KB - Virtual size: 28KB

.crt
Size: 512B - Virtual size: 212KB