28c873ec2083b658004bb3c029e397a1_JaffaCakes118

General

Target

28c873ec2083b658004bb3c029e397a1_JaffaCakes118
Size

178KB
MD5

28c873ec2083b658004bb3c029e397a1
SHA1

410e0fb6821aef73ca50fbf3dd2480daadd192e7
SHA256

76c7a2117cb2cc305fdd8baaf8e2d5a82cc797c57f17039f0c6b27a11179b5cc
SHA512

e7105a5042a11b1741167344b6ba16002fd311e7d5f5c3813cb4b05673dc183a342a8cb9248d632ca4d6aea5f1d1911fa2723e250fa5ce1640860758df6d56d4
SSDEEP

3072:115VVdZedtq4IFmlOaoT5iJkwMbL4hUiAZ7s/vcVebz48jMfEwwn3H5hL9wDSqax:LatOF3aoTtohytAbz4/fEww3Hr94Nxo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28c873ec2083b658004bb3c029e397a1_JaffaCakes118

Files

28c873ec2083b658004bb3c029e397a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fbc1a3d438bb6692f6710e4f51db60f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

rpcrt4

UuidCreate

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

user32

GetClassLongA
MessageBoxW

kernel32

LCMapStringW
DeleteCriticalSection
MultiByteToWideChar
GetThreadPriority
RtlUnwind
UnhandledExceptionFilter
GetCurrentDirectoryW
LCMapStringA
GetLastError
IsDebuggerPresent
EnterCriticalSection
GetModuleFileNameW
GetProcessHeap
ExitProcess
PurgeComm
InitializeCriticalSection
HeapReAlloc
HeapSize
EnumSystemLocalesA
HeapAlloc
SetUnhandledExceptionFilter
WriteFile
GetCurrentProcess
GetFullPathNameW
RaiseException
InterlockedIncrement
TerminateProcess
GetUserDefaultLCID
GetLocaleInfoW
GetConsoleOutputCP
EnumResourceNamesA
InterlockedDecrement
WriteConsoleW
GetCPInfo
GetCommandLineA
WideCharToMultiByte
HeapFree
LeaveCriticalSection
ExitProcess
GlobalAlloc
IsValidCodePage
SetEndOfFile
ReadFile
GetProcAddress
IsValidLocale
GetCurrentThreadId
GetVersionExA
WriteConsoleA
GetModuleHandleA
SetStdHandle
CreateFileA
Sleep
CloseHandle
GetFullPathNameA

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fbc1a3d438bb6692f6710e4f51db60f

Headers

File Characteristics

Imports

shell32

rpcrt4

advapi32

user32

kernel32

Sections

.text Size: 149KB - Virtual size: 148KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 25KB - Virtual size: 25KB

.crt Size: 512B - Virtual size: 344KB

.text
Size: 149KB - Virtual size: 148KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 25KB - Virtual size: 25KB

.crt
Size: 512B - Virtual size: 344KB