10a295df937237d6657813ad00bcec8b_JaffaCakes118

General

Target

10a295df937237d6657813ad00bcec8b_JaffaCakes118
Size

175KB
MD5

10a295df937237d6657813ad00bcec8b
SHA1

e00a65ae9a595dc0d3f42d45054807529351a748
SHA256

bac3ab9df42221565c9ea8e0d268b3255b8649b5130bee2935c42715714df001
SHA512

83ae40345cbee2f424d321ef6c88441e53d5754483b72cfefac7e60f9011b3a88ae03f2be72d61d1427690df1362e932a3bab6e30121eabbfce19ec14b8c10ed
SSDEEP

3072:MhUAPGWlyhLE0aA0x3Sg3AJL4hN08T6/CP5hLZ4OUdpAayChQ0w4Gxe1TGyUyZNn:aUiGeyhLEmZoN08T+Cr9ZUoQUeVGy7Zh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10a295df937237d6657813ad00bcec8b_JaffaCakes118

Files

10a295df937237d6657813ad00bcec8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2af4dea01ee97d31c850a7331cf22fd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

UnhandledExceptionFilter
WriteConsoleA
EnumSystemLocalesA
GetCommandLineA
InterlockedDecrement
WriteConsoleW
GetFullPathNameW
GetThreadPriority
HeapReAlloc
GetUserDefaultLCID
GetCurrentDirectoryW
GetModuleHandleA
InterlockedIncrement
EnterCriticalSection
SetStdHandle
MultiByteToWideChar
GetModuleFileNameW
SetCommConfig
SetUnhandledExceptionFilter
HeapFree
GetCurrentProcess
GetConsoleOutputCP
GetLastError
EnumResourceNamesA
GlobalAlloc
IsValidCodePage
CreateFileA
GetCurrentThreadId
IsDebuggerPresent
ReadFile
WriteFile
RaiseException
GetCPInfo
HeapSize
GetLocaleInfoW
LeaveCriticalSection
CloseHandle
ExitProcess
ExitProcess
LCMapStringW
IsValidLocale
DeleteCriticalSection
HeapAlloc
LCMapStringA
TerminateProcess
InitializeCriticalSection
Sleep
WideCharToMultiByte
SetEndOfFile
GetProcAddress
GetVersionExA
GetProcessHeap
RtlUnwind
GetFullPathNameA

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

rpcrt4

UuidCreate

user32

GetClassLongA
MessageBoxW

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2af4dea01ee97d31c850a7331cf22fd8

Headers

File Characteristics

Imports

kernel32

shell32

advapi32

rpcrt4

user32

Sections

.text Size: 146KB - Virtual size: 146KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 25KB - Virtual size: 25KB

.crt Size: 512B - Virtual size: 212KB

.text
Size: 146KB - Virtual size: 146KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 25KB - Virtual size: 25KB

.crt
Size: 512B - Virtual size: 212KB