2f8bb0f6c0860ca9f45abdc6ad285fb1_JaffaCakes118

General

Target

2f8bb0f6c0860ca9f45abdc6ad285fb1_JaffaCakes118
Size

166KB
MD5

2f8bb0f6c0860ca9f45abdc6ad285fb1
SHA1

b8e7dcf25f90b34c3b6d6c05fd75ad479cd90108
SHA256

a514baa2b3b71d5ba91f5a5dd04d0a6c964722e6ac568683df0946fe04d222e2
SHA512

c241f5212ae1d3b4b1e96c4b2931236fc11c27633a94a2a1d78e77e8b669724b9693b712cc075f49dae6bcc8720663a218a218cda7f6ea5ef525cb0ee5917b99
SSDEEP

3072:WU7qdkRo8Vxpb651dz0UssWHsEoAFA0oXhSEYjajS+HWssa:WUGdkRo8R6wsWMvA+0o4E0AS+HWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f8bb0f6c0860ca9f45abdc6ad285fb1_JaffaCakes118

Files

2f8bb0f6c0860ca9f45abdc6ad285fb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da8476ba2b96a88f042ca6e205626f25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetClassLongA
MessageBoxW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

kernel32

WriteConsoleA
WriteFile
LCMapStringA
WriteConsoleW
IsValidCodePage
GetThreadPriority
UnhandledExceptionFilter
GetVersionExA
TerminateProcess
ExitProcess
InterlockedIncrement
Sleep
IsDebuggerPresent
LeaveCriticalSection
IsValidLocale
EnterCriticalSection
GetProcessHeap
GlobalAlloc
LCMapStringW
SetCommConfig
SetStdHandle
HeapSize
InterlockedDecrement
GetModuleFileNameW
RtlUnwind
GetProcAddress
DeleteCriticalSection
GetCurrentProcess
GetCurrentDirectoryW
EnumResourceNamesA
InitializeCriticalSection
GetConsoleOutputCP
EnumSystemLocalesA
GetFullPathNameW
GetModuleHandleA
WideCharToMultiByte
GetLocaleInfoW
ExitProcess
GetCommandLineA
GetCPInfo
GetCurrentThreadId
GetLastError
SetUnhandledExceptionFilter
RaiseException
HeapReAlloc
GetUserDefaultLCID
SetEndOfFile
HeapAlloc
CloseHandle
ReadFile
MultiByteToWideChar
HeapFree
CreateFileA
GetFullPathNameA

rpcrt4

UuidCreate

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da8476ba2b96a88f042ca6e205626f25

Headers

File Characteristics

Imports

user32

advapi32

kernel32

rpcrt4

shell32

Sections

.text Size: 144KB - Virtual size: 143KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 19KB - Virtual size: 18KB

.crt Size: 512B - Virtual size: 72KB

.text
Size: 144KB - Virtual size: 143KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 19KB - Virtual size: 18KB

.crt
Size: 512B - Virtual size: 72KB