fefca26e83c64b5495f34e76f7be8599_JaffaCakes118

General

Target

fefca26e83c64b5495f34e76f7be8599_JaffaCakes118
Size

87KB
MD5

fefca26e83c64b5495f34e76f7be8599
SHA1

79e2bb037af9203d1378e16b96d7db3664d66980
SHA256

91efaa4b187d53d5317b6dabc34dddd6c7143d99687cec27ba90b2b089f82f50
SHA512

b46fadd19f186b76fc3d84feaf9f3b3b404a712a24a7fafb78a9fb0e94543653a6eb4285dc2426736d1522616a69b03dd24ddc22e843d94c0bac79605365170f
SSDEEP

1536:qgEZgyAcKpOZlh6Bi1Yi12A+F2Ap7eS7p+TkNj1gnzV3WI6EFB:nEZgyDKiX6uFS7ZAy6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fefca26e83c64b5495f34e76f7be8599_JaffaCakes118

Files

fefca26e83c64b5495f34e76f7be8599_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9e725aaabc5e0bf4499be9b1da4dc7de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

user32

wsprintfA
CharNextA
LoadStringA
MessageBoxA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

InitializeCriticalSection
lstrlenW
SetHandleInformation
EnterCriticalSection
CreatePipe
WideCharToMultiByte
GetStartupInfoA
lstrcmpiA
MultiByteToWideChar
CreateJobSet
GetSystemDirectoryA
LoadResource
LeaveCriticalSection
LoadLibraryExA
lstrlenA
GetTickCount
GetModuleFileNameA
CreateProcessA
RaiseException
QueryPerformanceCounter
OutputDebugStringA
lstrcpynA
CloseHandle
WriteFile
GetThreadLocale
GetVersionExA
InterlockedDecrement
MoveFileA
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleA
CreateFileA
IsDBCSLeadByte
InterlockedExchange
LockResource
GetLocaleInfoA
DeleteFileA
ExitProcess
lstrcatA
SetVolumeLabelA
OpenSemaphoreA
GetProcAddress
DeleteCriticalSection
FreeLibrary
GetSystemTimeAsFileTime
ReadFile
SizeofResource
GetLastError
InterlockedIncrement
GetShortPathNameA
FindResourceA
GetACP

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sssa
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 139KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e725aaabc5e0bf4499be9b1da4dc7de

Headers

File Characteristics

Imports

advapi32

user32

version

kernel32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 119KB

.sssa Size: 3KB - Virtual size: 3KB

.edata Size: 139KB - Virtual size: 251KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 119KB

.sssa
Size: 3KB - Virtual size: 3KB

.edata
Size: 139KB - Virtual size: 251KB