0fb7e6871cfa5a932903645c186d2df1_JaffaCakes118

General

Target

0fb7e6871cfa5a932903645c186d2df1_JaffaCakes118
Size

176KB
MD5

0fb7e6871cfa5a932903645c186d2df1
SHA1

9333461cbc49ecd4e91d1bdf4c5c1474eaaf085c
SHA256

7f01d8dd298bc2dd6983d97cfa83db8ef80fff1b428b68475c94d4e04267e77b
SHA512

5f087a84fda3ce859308680b12f845137dc219d1446d9421a997b253d181afeda02d742d8c02f91b5e55c328759287f037746a708d3592dc4ed039a4008b561c
SSDEEP

3072:7wbqKYJUz2rp2YLb+tye2FZGZu9ZTA44AM3vf6h1kCZEtd2g4Psp2:7wbqKYyK1L/+7EZ9lRDM/ih2yE6gf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb7e6871cfa5a932903645c186d2df1_JaffaCakes118

Files

0fb7e6871cfa5a932903645c186d2df1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ec46400c5b81491f3f01618ebbee53e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

user32

GetClassLongA
MessageBoxW

kernel32

EnumSystemLocalesA
GetConsoleOutputCP
GetProcessHeap
GetUserDefaultLCID
GetThreadPriority
GetLastError
TerminateProcess
WriteFile
GetModuleFileNameW
WideCharToMultiByte
GetCurrentProcess
EnterCriticalSection
InterlockedIncrement
IsValidCodePage
SetStdHandle
InterlockedDecrement
CreateFileA
GetCurrentDirectoryW
HeapFree
CloseHandle
SetCommConfig
ExitProcess
HeapSize
LCMapStringW
Sleep
MultiByteToWideChar
RaiseException
ReadFile
GetVersionExA
GetProcAddress
EnumResourceNamesA
HeapAlloc
LeaveCriticalSection
GetCurrentThreadId
GetFullPathNameW
InitializeCriticalSection
WriteConsoleA
GetModuleHandleA
LCMapStringA
DeleteCriticalSection
SetEndOfFile
ExitProcess
SetUnhandledExceptionFilter
IsValidLocale
WriteConsoleW
UnhandledExceptionFilter
HeapReAlloc
RtlUnwind
GlobalAlloc
GetCommandLineA
IsDebuggerPresent
GetLocaleInfoW
GetCPInfo
GetFullPathNameA

rpcrt4

UuidCreate

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ec46400c5b81491f3f01618ebbee53e

Headers

File Characteristics

Imports

advapi32

shell32

user32

kernel32

rpcrt4

Sections

.text Size: 152KB - Virtual size: 152KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 20KB - Virtual size: 20KB

.crt Size: 512B - Virtual size: 208KB

.text
Size: 152KB - Virtual size: 152KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 20KB - Virtual size: 20KB

.crt
Size: 512B - Virtual size: 208KB