ce00b42308508babf890107af3114066_JaffaCakes118

General

Target

ce00b42308508babf890107af3114066_JaffaCakes118
Size

175KB
MD5

ce00b42308508babf890107af3114066
SHA1

f26ee97eca361d00369ad4fa9d3dff9e26eb7bbb
SHA256

badd77727362a58a585447ac520391c35b8994bfef847d21a479667fba45c122
SHA512

b6afa2dc9aa31c9f5b2d6bfaf44a446b3476b9dd1a5a165618ec589e7e131cd2f7f1590fe0323228dad0175420077f7b43148e740b35ae66698be04d097deb40
SSDEEP

3072:MhUAPGWlyhLE0aA0x3Sg3AJL4hN08T6/CP5hLZ4OUdpAayChQ0w4Gxe1TGyUyZNn:aUiGeyhLEmZoN08T+Cr9ZUoQUeVGy7Zh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce00b42308508babf890107af3114066_JaffaCakes118

Files

ce00b42308508babf890107af3114066_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2af4dea01ee97d31c850a7331cf22fd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

UnhandledExceptionFilter
WriteConsoleA
EnumSystemLocalesA
GetCommandLineA
InterlockedDecrement
WriteConsoleW
GetFullPathNameW
GetThreadPriority
HeapReAlloc
GetUserDefaultLCID
GetCurrentDirectoryW
GetModuleHandleA
InterlockedIncrement
EnterCriticalSection
SetStdHandle
MultiByteToWideChar
GetModuleFileNameW
SetCommConfig
SetUnhandledExceptionFilter
HeapFree
GetCurrentProcess
GetConsoleOutputCP
GetLastError
EnumResourceNamesA
GlobalAlloc
IsValidCodePage
CreateFileA
GetCurrentThreadId
IsDebuggerPresent
ReadFile
WriteFile
RaiseException
GetCPInfo
HeapSize
GetLocaleInfoW
LeaveCriticalSection
CloseHandle
ExitProcess
ExitProcess
LCMapStringW
IsValidLocale
DeleteCriticalSection
HeapAlloc
LCMapStringA
TerminateProcess
InitializeCriticalSection
Sleep
WideCharToMultiByte
SetEndOfFile
GetProcAddress
GetVersionExA
GetProcessHeap
RtlUnwind
GetFullPathNameA

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

rpcrt4

UuidCreate

user32

GetClassLongA
MessageBoxW

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2af4dea01ee97d31c850a7331cf22fd8

Headers

File Characteristics

Imports

kernel32

shell32

advapi32

rpcrt4

user32

Sections

.text Size: 146KB - Virtual size: 146KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 25KB - Virtual size: 25KB

.crt Size: 512B - Virtual size: 212KB

.text
Size: 146KB - Virtual size: 146KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 25KB - Virtual size: 25KB

.crt
Size: 512B - Virtual size: 212KB