ce60a82157bcabdfa8cbb904a323299f_JaffaCakes118

General

Target

ce60a82157bcabdfa8cbb904a323299f_JaffaCakes118
Size

182KB
MD5

ce60a82157bcabdfa8cbb904a323299f
SHA1

62bae859b6b6bfea9e8c540410c18b06eebb0ad7
SHA256

b4ff89790bc083da4ceeb56986cbcdee64b202155cd4854479096e11b18adae1
SHA512

589ac0846fd8bdefa18562370481706bba5a1aa8391a207a0a982c116ac364c4b60ffe093ebce5ff2d44054d5de8b8271ecac9541c9083f5018c92a95b2c72b6
SSDEEP

3072:rYFNLfoK1Y9pmXnPGXFyc9ImActZbYKmAGpdrwhWMDhn8zFRyyB+Ydily8:r2zijEuVyc95cTAW48zFwl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce60a82157bcabdfa8cbb904a323299f_JaffaCakes118

Files

ce60a82157bcabdfa8cbb904a323299f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f26326ea36f7460b62330a5b41245eda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

rpcrt4

UuidCreate

user32

GetClassLongA
MessageBoxW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

kernel32

GetThreadPriority
GetUserDefaultLCID
GetCurrentThreadId
GetProcAddress
GetModuleFileNameW
HeapAlloc
HeapFree
SetEndOfFile
GetLocaleInfoW
GetCurrentDirectoryW
InterlockedIncrement
ReadFile
GetConsoleOutputCP
PurgeComm
InterlockedDecrement
CloseHandle
HeapReAlloc
WriteConsoleA
DeleteCriticalSection
IsDebuggerPresent
EnterCriticalSection
CreateFileA
EnumResourceNamesA
RaiseException
GetProcessHeap
LCMapStringA
LCMapStringW
WideCharToMultiByte
GetFullPathNameW
TerminateProcess
GetCommandLineA
UnhandledExceptionFilter
GetCurrentProcess
IsValidCodePage
LeaveCriticalSection
MultiByteToWideChar
GlobalAlloc
RtlUnwind
ExitProcess
ExitProcess
InitializeCriticalSection
SetUnhandledExceptionFilter
EnumSystemLocalesA
Sleep
IsValidLocale
GetVersionExA
GetModuleHandleA
SetStdHandle
GetCPInfo
GetLastError
WriteConsoleW
WriteFile
HeapSize
GetFullPathNameA

Sections

.text
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f26326ea36f7460b62330a5b41245eda

Headers

File Characteristics

Imports

advapi32

rpcrt4

user32

shell32

kernel32

Sections

.text Size: 155KB - Virtual size: 154KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 23KB - Virtual size: 23KB

.crt Size: 512B - Virtual size: 220KB

.text
Size: 155KB - Virtual size: 154KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 23KB - Virtual size: 23KB

.crt
Size: 512B - Virtual size: 220KB