JaffaCakes118_6e92d1f3c45230d7774baced558ac9af

General

Target

JaffaCakes118_6e92d1f3c45230d7774baced558ac9af
Size

179KB
MD5

6e92d1f3c45230d7774baced558ac9af
SHA1

9c02ea0af74289ef82f1e6f92f900f6e6ce5d43e
SHA256

27bf80cedb77bb41032aa4e3deaebea453de9ccca209725790d93fcee5bfd79b
SHA512

eff679c4ae18946de70b435f19ec60d35e4aa7f25f880cbb8da0bba1ee1bcb83ea997b843a8f3ef199aff9328409c2a712d5389c01a15640161b4e99bf356a9f
SSDEEP

3072:J5c3fSRIhyjmaXbQ1b320SHPemkDFroMXcwwJFugUBko1fs5FtNFP4ifTZQCb:Jpbr+3AeZFroyNwJYgABq1F1v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6e92d1f3c45230d7774baced558ac9af

Files

JaffaCakes118_6e92d1f3c45230d7774baced558ac9af
.exe windows:4 windows x86 arch:x86

6200777f454b778349bab8d60625ea69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetClassLongA
MessageBoxW

rpcrt4

UuidCreate

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

kernel32

Sleep
DeleteCriticalSection
LCMapStringA
HeapFree
SetEndOfFile
GetThreadPriority
LCMapStringW
GetCurrentProcess
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoW
InterlockedIncrement
SetStdHandle
ExitProcess
GetCurrentThreadId
PurgeComm
GetLastError
GetProcAddress
GetCPInfo
GetModuleFileNameW
UnhandledExceptionFilter
GetConsoleOutputCP
IsDebuggerPresent
EnumResourceNamesA
WriteConsoleW
EnumSystemLocalesA
TerminateProcess
IsValidLocale
RtlUnwind
CreateFileA
GetCommandLineA
GetProcessHeap
ExitProcess
HeapAlloc
SetUnhandledExceptionFilter
EnterCriticalSection
MultiByteToWideChar
ReadFile
WriteFile
IsValidCodePage
GetModuleHandleA
InterlockedDecrement
GetCurrentDirectoryW
HeapSize
WideCharToMultiByte
InitializeCriticalSection
GetFullPathNameW
GetVersionExA
LeaveCriticalSection
RaiseException
GlobalAlloc
CloseHandle
WriteConsoleA
GetFullPathNameA

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6200777f454b778349bab8d60625ea69

Headers

File Characteristics

Imports

user32

rpcrt4

advapi32

kernel32

shell32

Sections

.text Size: 152KB - Virtual size: 152KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 23KB - Virtual size: 22KB

.crt Size: 512B - Virtual size: 348KB

.text
Size: 152KB - Virtual size: 152KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 23KB - Virtual size: 22KB

.crt
Size: 512B - Virtual size: 348KB