d80febbb809a82278e7575c633be76ff_JaffaCakes118

General

Target

d80febbb809a82278e7575c633be76ff_JaffaCakes118
Size

182KB
MD5

d80febbb809a82278e7575c633be76ff
SHA1

74786876d71d4a66d011c8dedc52a0c46a06bce8
SHA256

c4bb922ff26e04fd6d30248faa50f8cc5d5da43f4dec108bebed332f1a358eeb
SHA512

e83dfe41d08a400369bf5537abf1e236a8bfd9ea2d7a04546dca2e037a2decb4767b58b73bca6aed88ea9bab4ea7901cd34e497df578129dec80aec41ccdb867
SSDEEP

3072:qSv0Vo4ONwZeAL6+is5vZZG2JmxAkUAdcWqzNdppMa5nvbM12OAB:xQXunsdZZGCmxXdxnkM12O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d80febbb809a82278e7575c633be76ff_JaffaCakes118

Files

d80febbb809a82278e7575c633be76ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e05637c44c7c96425469c611aeb6fb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

kernel32

IsValidCodePage
GetProcAddress
IsValidLocale
GetLocaleInfoW
GetCurrentThreadId
WriteFile
UnhandledExceptionFilter
EnumSystemLocalesA
GetModuleFileNameW
GetThreadPriority
HeapSize
GetFullPathNameW
RaiseException
InterlockedIncrement
DeleteCriticalSection
LCMapStringW
GetCommandLineA
PurgeComm
ReadFile
InterlockedDecrement
SetStdHandle
WideCharToMultiByte
HeapReAlloc
EnterCriticalSection
GetVersionExA
GetCurrentProcess
GetLastError
SetUnhandledExceptionFilter
LeaveCriticalSection
HeapFree
EnumResourceNamesA
InitializeCriticalSection
CloseHandle
ExitProcess
WriteConsoleW
ExitProcess
CreateFileA
GetCPInfo
SetEndOfFile
GetCurrentDirectoryW
GetUserDefaultLCID
Sleep
LCMapStringA
IsDebuggerPresent
RtlUnwind
MultiByteToWideChar
GetConsoleOutputCP
GetModuleHandleA
TerminateProcess
GetProcessHeap
GlobalAlloc
HeapAlloc
WriteConsoleA
GetFullPathNameA

user32

GetClassLongA
MessageBoxW

rpcrt4

UuidCreate

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e05637c44c7c96425469c611aeb6fb3

Headers

File Characteristics

Imports

advapi32

shell32

kernel32

user32

rpcrt4

Sections

.text Size: 156KB - Virtual size: 156KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 22KB - Virtual size: 22KB

.crt Size: 512B - Virtual size: 216KB

.text
Size: 156KB - Virtual size: 156KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 22KB - Virtual size: 22KB

.crt
Size: 512B - Virtual size: 216KB