fbc9869c4dfc9ba6420202e949e20ea3_JaffaCakes118

General

Target

fbc9869c4dfc9ba6420202e949e20ea3_JaffaCakes118
Size

181KB
MD5

fbc9869c4dfc9ba6420202e949e20ea3
SHA1

b8bd21f6d020efcc73dd1a030a85bcbe99e577a9
SHA256

b4b6fdc095a7d4a5ef3ed7e9dbc5761bbb41153d0ec67921d2e595aa5e50f514
SHA512

ad6d305cea5980127850244d2329d72c6b8f70931f96da4a8fb82ba161559ea3c8270888d07a7f7ff80734f21659f6d82491c809c890b70f9b09acafc8d839c5
SSDEEP

3072:Gxl1HO4NAPPrQv93zKRKtgI0H97iBAdjUYy6N7GaUnzyI5dTjfREoOuQHOOZzo:GbdO4ePPa3zdkH9kAd5N7GhnHtjfREo8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbc9869c4dfc9ba6420202e949e20ea3_JaffaCakes118

Files

fbc9869c4dfc9ba6420202e949e20ea3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

015cb18c54b874a2e710324a99ec2d84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LCMapStringW
GetLastError
GetThreadPriority
HeapFree
WideCharToMultiByte
GetCurrentThreadId
WriteConsoleW
SetEndOfFile
LeaveCriticalSection
SetUnhandledExceptionFilter
HeapSize
SetCommConfig
IsValidCodePage
InterlockedIncrement
GetModuleFileNameW
LCMapStringA
EnumSystemLocalesA
GlobalAlloc
GetUserDefaultLCID
EnterCriticalSection
GetLocaleInfoW
RaiseException
GetVersionExA
GetConsoleOutputCP
EnumResourceNamesA
GetCurrentDirectoryW
CloseHandle
DeleteCriticalSection
ReadFile
WriteConsoleA
GetModuleHandleA
InterlockedDecrement
GetFullPathNameW
SetStdHandle
MultiByteToWideChar
ExitProcess
GetProcessHeap
HeapReAlloc
TerminateProcess
GetCommandLineA
UnhandledExceptionFilter
GetCPInfo
InitializeCriticalSection
CreateFileA
WriteFile
RtlUnwind
IsDebuggerPresent
GetProcAddress
GetCurrentProcess
IsValidLocale
HeapAlloc
Sleep
ExitProcess
GetFullPathNameA

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

user32

GetClassLongA
MessageBoxW

rpcrt4

UuidCreate

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

015cb18c54b874a2e710324a99ec2d84

Headers

File Characteristics

Imports

kernel32

shell32

advapi32

user32

rpcrt4

Sections

.text Size: 150KB - Virtual size: 149KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 27KB - Virtual size: 27KB

.crt Size: 512B - Virtual size: 220KB

.text
Size: 150KB - Virtual size: 149KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 27KB - Virtual size: 27KB

.crt
Size: 512B - Virtual size: 220KB