185852b0e4c8e6ac819d795f9959fab7_JaffaCakes118

General

Target

185852b0e4c8e6ac819d795f9959fab7_JaffaCakes118
Size

192KB
MD5

185852b0e4c8e6ac819d795f9959fab7
SHA1

c4806eb725496bb49fc038e3db76a15b3a821c9a
SHA256

b089aecbb096c5b4437a2da84f1f103a719d471e61ba0dda88364220d07a044c
SHA512

864ba9c2b1a0401474d1d6b9a5d292bbedecf78368c4aec63a11e1a82143a808d91dd560210df50e0bbfbaa82601db9c750fe5df583657d8c64c550031c8dd96
SSDEEP

3072:uj1ttSnYT3+TG4cJBhACHs5kisWuTJ8kFQfaCQ6Hx2CmcnT7HNmhv4lZZnNI1VS2:uj1t4Sh4JCHAkisWuN8kUhQqZjT7Sv4T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
185852b0e4c8e6ac819d795f9959fab7_JaffaCakes118

Files

185852b0e4c8e6ac819d795f9959fab7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fe65fa865ff69fb3f41975adcf38e35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

rpcrt4

UuidCreate

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

user32

GetClassLongA
MessageBoxW

kernel32

WriteFile
HeapAlloc
WriteConsoleA
LCMapStringW
ReadFile
HeapReAlloc
GetThreadPriority
SetUnhandledExceptionFilter
LCMapStringA
HeapFree
GetModuleHandleA
InterlockedIncrement
MultiByteToWideChar
EnterCriticalSection
SetCommConfig
GetCPInfo
GetProcAddress
GetFullPathNameW
GetVersionExA
InterlockedDecrement
GetLastError
IsValidLocale
RaiseException
InitializeCriticalSection
GlobalAlloc
WideCharToMultiByte
SetEndOfFile
GetCurrentThreadId
GetConsoleOutputCP
SetStdHandle
EnumResourceNamesA
ExitProcess
GetCurrentDirectoryW
IsDebuggerPresent
EnumSystemLocalesA
ExitProcess
GetCurrentProcess
RtlUnwind
GetCommandLineA
UnhandledExceptionFilter
LeaveCriticalSection
GetModuleFileNameW
HeapSize
CloseHandle
Sleep
GetUserDefaultLCID
CreateFileA
GetProcessHeap
TerminateProcess
DeleteCriticalSection
GetLocaleInfoW
IsValidCodePage
WriteConsoleW
GetFullPathNameA

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fe65fa865ff69fb3f41975adcf38e35

Headers

File Characteristics

Imports

advapi32

rpcrt4

shell32

user32

kernel32

Sections

.text Size: 164KB - Virtual size: 163KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 24KB - Virtual size: 24KB

.crt Size: 512B - Virtual size: 84KB

.text
Size: 164KB - Virtual size: 163KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 24KB - Virtual size: 24KB

.crt
Size: 512B - Virtual size: 84KB