JaffaCakes118_6129b4d7ce88e1ab364f8c4b70674c64

General

Target

JaffaCakes118_6129b4d7ce88e1ab364f8c4b70674c64
Size

199KB
MD5

6129b4d7ce88e1ab364f8c4b70674c64
SHA1

a366de5a915edd38b8aa13736f7e1d7814586dab
SHA256

aa8cccc49dba224f73fe18ae068248919eea80e7819ef670f4a528eeefe65456
SHA512

9016b78c6b7e08ddd3bac7c0111d9b8550bcac0c3851d0d7ecfa77d18ef5248e2445aa1f8d3e909c9c24af7cbc613a87d2467c821005f5185ad7943844a40c64
SSDEEP

6144:gO9ODXnHKR5mXwDTuZUdOfYv7u7Z3eG1CuS8j7y:T9Aa5mgDTuZUMfeKwOj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6129b4d7ce88e1ab364f8c4b70674c64

Files

JaffaCakes118_6129b4d7ce88e1ab364f8c4b70674c64
.exe windows:4 windows x86 arch:x86

03beb5a3e8a1917a826137b138ff251b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

SendMessageA
TranslateMessage
GetDC
GetMessageW
DispatchMessageW
CharNextW
CharUpperW
PostThreadMessageW
wsprintfW
KillTimer
SetTimer
UnregisterClassA

shlwapi

PathCombineW
PathFileExistsW

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

GlobalFree
FillConsoleOutputCharacterA
GetCPInfo
LockResource
OutputDebugStringW
lstrcpyA
GetProcessWorkingSetSize
lstrlenW
GlobalAlloc
WideCharToMultiByte
FindClose
InitializeCriticalSection
EnumResourceNamesA
GetACP
lstrcmpiW
MultiByteToWideChar
GetTickCount
FreeEnvironmentStringsW
CreateFileMappingW
lstrcpyW
GetLastError
GetModuleHandleW

advapi32

RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW

ole32

CoRevokeClassObject
CoRegisterClassObject
CoTaskMemRealloc
CoInitialize
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
StringFromCLSID

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03beb5a3e8a1917a826137b138ff251b

Headers

File Characteristics

Imports

user32

shlwapi

oleacc

kernel32

advapi32

ole32

Sections

.text Size: 125KB - Virtual size: 125KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 69KB - Virtual size: 69KB

.isete Size: 1024B - Virtual size: 84KB

.text
Size: 125KB - Virtual size: 125KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 69KB - Virtual size: 69KB

.isete
Size: 1024B - Virtual size: 84KB