ed130b636a56ded5b3c8af1a8fe7565e_JaffaCakes118

General

Target

ed130b636a56ded5b3c8af1a8fe7565e_JaffaCakes118
Size

162KB
MD5

ed130b636a56ded5b3c8af1a8fe7565e
SHA1

9f6df4231c01feec06cd9728ef78ffd051a75a2b
SHA256

b92e30d54dd725b4d4183624c87541d1bdc27a9458e2924826dfdc1b738efed8
SHA512

834e8350d0a92a6eb005e880382bf2c70a5a263158ad8b31ddc58966d297cb2ecbcb5da3d612f278e44ef31157cbb3e72e331cc52d05e5edff83e5a088f9c386
SSDEEP

3072:KcRVBrdcMdKSbBFd0F4Ix215Fo70GoDtJO9VXqGzJBRfH:tPyBSbB7Ix2po70tO9koRfH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed130b636a56ded5b3c8af1a8fe7565e_JaffaCakes118

Files

ed130b636a56ded5b3c8af1a8fe7565e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38873715a7f99c8e9b349f5a6cf3bcd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetClassLongA
MessageBoxW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

rpcrt4

UuidCreate

kernel32

WriteConsoleW
DeleteCriticalSection
EnumSystemLocalesA
IsValidLocale
WriteFile
TerminateProcess
GetThreadPriority
UnhandledExceptionFilter
GetModuleHandleA
IsValidCodePage
HeapSize
GlobalAlloc
GetCurrentProcess
LCMapStringA
SetCommConfig
IsDebuggerPresent
GetConsoleOutputCP
ExitProcess
HeapAlloc
GetCommandLineA
GetCPInfo
Sleep
CloseHandle
InitializeCriticalSection
GetModuleFileNameW
WideCharToMultiByte
EnumResourceNamesA
ReadFile
GetProcessHeap
GetLocaleInfoW
InterlockedDecrement
HeapReAlloc
EnterCriticalSection
RaiseException
InterlockedIncrement
HeapFree
LCMapStringW
GetCurrentThreadId
GetUserDefaultLCID
SetStdHandle
ExitProcess
MultiByteToWideChar
RtlUnwind
WriteConsoleA
SetUnhandledExceptionFilter
GetLastError
LeaveCriticalSection
CreateFileA
SetEndOfFile
GetProcAddress
GetVersionExA
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38873715a7f99c8e9b349f5a6cf3bcd2

Headers

File Characteristics

Imports

user32

shell32

advapi32

rpcrt4

kernel32

Sections

.text Size: 131KB - Virtual size: 131KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 27KB - Virtual size: 27KB

.crt Size: 512B - Virtual size: 76KB

.text
Size: 131KB - Virtual size: 131KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 27KB - Virtual size: 27KB

.crt
Size: 512B - Virtual size: 76KB