JaffaCakes118_1ca91f0e0fc16e2eedee7f9076578c81

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_1ca91f0e0fc16e2eedee7f9076578c81
Size

181KB
MD5

1ca91f0e0fc16e2eedee7f9076578c81
SHA1

215c6823ce9ca0ff4a652e2e94ee18e96ff76a99
SHA256

6f84907ff69c67a295786991d199157942d35edd3c7351eb1ada13d26734b953
SHA512

d87e792be2c40b76c0d78174868f6ca5557e7d6bb154f3baa26239964fc2359dc512320a5d94745c042257a0c346c3f5f6909bd1ddff9084b53f44f6f21ffda2
SSDEEP

3072:ypTafsJaImvR5yAiFy7z/axIRi5kaj+v+kmKVTbI8h68lfLxXMGsjsMP5HZ4GHU8:gTafSsb/BRi5jRkmKVPZh68ljxXMNsvi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1ca91f0e0fc16e2eedee7f9076578c81

Files

JaffaCakes118_1ca91f0e0fc16e2eedee7f9076578c81
.exe windows:4 windows x86 arch:x86

2634aee4cb08e0b567fac2bd8f4f8915

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

rpcrt4

UuidCreate

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

ole32

CoCreateGuid
CoInitialize
CoUninitialize
StringFromGUID2
CoCreateInstance
CoSetProxyBlanket

user32

GetClassLongA
MessageBoxW

kernel32

IsValidLocale
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
HeapAlloc
GetEnvironmentStringsW
GetConsoleCP
TerminateProcess
GetThreadPriority
GetLocaleInfoA
QueryPerformanceCounter
TlsSetValue
SetUnhandledExceptionFilter
SetHandleCount
HeapCreate
WriteConsoleA
EnumSystemLocalesA
SetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
VirtualAlloc
GetCurrentDirectoryW
InterlockedIncrement
SetCommTimeouts
GetProcAddress
WideCharToMultiByte
GetFileType
GetStdHandle
GetCurrentThreadId
CloseHandle
VirtualFree
InitializeCriticalSection
FreeEnvironmentStringsW
IsDebuggerPresent
GetFullPathNameW
GetCommandLineA
GetModuleFileNameA
RaiseException
EnumResourceNamesA
SetEndOfFile
GetLastError
SetFilePointer
GetModuleHandleA
TlsGetValue
GetSystemTimeAsFileTime
ExitProcess
HeapFree
GetTickCount
GetACP
FlushFileBuffers
GetUserDefaultLCID
Sleep
InterlockedDecrement
WriteConsoleW
DeleteCriticalSection
GetCPInfo
RtlUnwind
GetStringTypeW
GetStartupInfoA
HeapReAlloc
ExitProcess
TlsFree
ReadFile
TlsAlloc
LeaveCriticalSection
GlobalAlloc
GetCurrentProcessId
HeapDestroy
LoadLibraryA
GetConsoleMode
GetVersionExA
FreeEnvironmentStringsA
CreateFileA
HeapSize
GetOEMCP
MultiByteToWideChar
GetLocaleInfoW
SetLastError
UnhandledExceptionFilter
GetCurrentProcess
GetProcessHeap
IsValidCodePage
GetEnvironmentStrings
GetFullPathNameA

shlwapi

SHDeleteKeyW

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2634aee4cb08e0b567fac2bd8f4f8915

Headers

File Characteristics

Imports

advapi32

rpcrt4

shell32

ole32

user32

kernel32

shlwapi

Sections

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 20KB

.crt Size: 512B - Virtual size: 344KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 20KB

.crt
Size: 512B - Virtual size: 344KB