JaffaCakes118_6fb42f91b599cc618aec3840201b7400

General

Target

JaffaCakes118_6fb42f91b599cc618aec3840201b7400
Size

117KB
MD5

6fb42f91b599cc618aec3840201b7400
SHA1

e20da35efa7649193b6d49dad605d577cbe5f47d
SHA256

93c01b79be67d2417563b1490a3d067dc437776ca852059148b220948b1e8c2b
SHA512

1670c8c1a6a2a71b6fe06ef1fc7693fb0962de303389bdb3e709c59e45830bd5b05538eaeb3f11a74bdac751dcdbaea3ecb2e3b494da2d26a37fef674619809c
SSDEEP

3072:ecCDFux/BWc8j9/IAEG/gwX7KanR33yDFU2:ecaFuPpE9/IWowXdqF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6fb42f91b599cc618aec3840201b7400

Files

JaffaCakes118_6fb42f91b599cc618aec3840201b7400
.exe windows:4 windows x86 arch:x86

cbed3fdb6ea82c4725579584ad595332

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetPrivateProfileSectionW
VirtualQueryEx
WriteConsoleW
GetStartupInfoA
lstrcpyA
GetStdHandle
GetCommandLineA
Sleep
GetFileAttributesA
VirtualProtect
WriteConsoleW
CancelIo
WriteConsoleW
DeleteFileA
CopyFileA
GetProcessHeap
SetEvent
GetModuleHandleA
HeapDestroy
GetDriveTypeW
lstrlenW

mmcndmgr

DllRegisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow

cryptui

WizardFree
LocalEnroll
LocalEnroll
WizardFree
CryptUIWizImport
DllRegisterServer
CryptUIStartCertMgr
CryptUIWizDigitalSign
LocalEnrollNoDS
CryptUIWizBuildCTL
CryptUIWizExport
DllUnregisterServer
CryptUIDlgViewContext

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impexp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cbed3fdb6ea82c4725579584ad595332

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 16KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 110KB - Virtual size: 110KB

.rdata Size: 512B - Virtual size: 257B

.impexp Size: 512B - Virtual size: 80B

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 16KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 110KB - Virtual size: 110KB

.rdata
Size: 512B - Virtual size: 257B

.impexp
Size: 512B - Virtual size: 80B