29a245f085a2825950cd6e5528f1c5ea_JaffaCakes118

General

Target

29a245f085a2825950cd6e5528f1c5ea_JaffaCakes118
Size

173KB
MD5

29a245f085a2825950cd6e5528f1c5ea
SHA1

0783d5e2ef9cef9da2dffa543f74794577624ec9
SHA256

726e37659ac485919531b40d20ab7ac9ac4239927cdff9f0fdc2c1fd0d3e578e
SHA512

54d0a92eb515c424b2a64667c6528db8c47cefc2dc1a0db1be33ab670668b57f9e6dc3d6330fe0109e4f80de95b010f1654c635268e1aef4f8bd3dd83cef2a4b
SSDEEP

3072:ski6tcPd4StHLgnmrwJIH9KihCKHMfovbcyRcaRB0Gni7WAtu0C5ELU4nnwmJkmF:lf8H1rwJIdlBcy2aRFi7WE65ELnB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29a245f085a2825950cd6e5528f1c5ea_JaffaCakes118

Files

29a245f085a2825950cd6e5528f1c5ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95ed99dcb5673cd3747edb2ad67681d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

rpcrt4

UuidCreate

kernel32

GetCommandLineA
GetCurrentThreadId
GetCurrentDirectoryW
GetThreadPriority
UnhandledExceptionFilter
InterlockedDecrement
GetLocaleInfoW
GetModuleHandleA
GetCurrentProcess
IsValidLocale
EnterCriticalSection
IsDebuggerPresent
GetProcAddress
InitializeCriticalSection
WriteFile
Sleep
SetCommConfig
LeaveCriticalSection
HeapReAlloc
HeapAlloc
MultiByteToWideChar
TerminateProcess
GlobalAlloc
GetProcessHeap
EnumSystemLocalesA
GetVersionExA
GetFullPathNameW
RaiseException
ReadFile
EnumResourceNamesA
LCMapStringW
CloseHandle
HeapFree
ExitProcess
GetLastError
WideCharToMultiByte
LCMapStringA
InterlockedIncrement
GetConsoleOutputCP
GetCPInfo
SetUnhandledExceptionFilter
GetModuleFileNameW
WriteConsoleW
SetEndOfFile
IsValidCodePage
ExitProcess
GetUserDefaultLCID
RtlUnwind
DeleteCriticalSection
HeapSize
CreateFileA
WriteConsoleA
SetStdHandle
GetFullPathNameA

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

user32

GetClassLongA
MessageBoxW

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95ed99dcb5673cd3747edb2ad67681d5

Headers

File Characteristics

Imports

shell32

rpcrt4

kernel32

advapi32

user32

Sections

.text Size: 140KB - Virtual size: 140KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 29KB - Virtual size: 28KB

.crt Size: 512B - Virtual size: 212KB

.text
Size: 140KB - Virtual size: 140KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 29KB - Virtual size: 28KB

.crt
Size: 512B - Virtual size: 212KB