JaffaCakes118_045cd3ab0577b307a658f26fe61f55bf

General

Target

JaffaCakes118_045cd3ab0577b307a658f26fe61f55bf
Size

65KB
MD5

045cd3ab0577b307a658f26fe61f55bf
SHA1

b2e5b7fb9061be1abdf81e86b639961ba4608abf
SHA256

a4f82ca87281beeb8d5200864f0b7bff3492e1f7163922bdcf9be78cc245e2b6
SHA512

6568e54ab1cd1f4af00a6e5d7540f7eef485c2d934f39b8d3af4e8f56b88eecdd95ea7fa23a17cac40a5e4a79e30c9cd1dcbe51064ae9b356862653847a8430a
SSDEEP

1536:UZxsOOq1ahkyk/QGvpBvJ4uD9hCJTeQlBZvCJbbcDsUG+Qp:UZxMqLo6vJ4ohCJpCJb6vS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_045cd3ab0577b307a658f26fe61f55bf

Files

JaffaCakes118_045cd3ab0577b307a658f26fe61f55bf
.exe windows:4 windows x86 arch:x86

b566ad5bacf2c25a56b192a6825d69c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lcreat
GetModuleHandleA
SetConsolePalette
SleepEx
SetEnvironmentVariableW
SetLocalTime
GetSystemTimeAsFileTime
WaitCommEvent
WaitForSingleObjectEx
QueryPerformanceCounter
IsDBCSLeadByteEx
GetUserDefaultUILanguage
GetCurrentConsoleFont
CreateTimerQueueTimer
ExitProcess
FlushConsoleInputBuffer
LocalReAlloc
GetCurrentThreadId
ClearCommError
GlobalMemoryStatus
WaitForMultipleObjects
lstrcatW
CreateTimerQueue
GetConsoleCP
SetThreadAffinityMask
MoveFileA
SetFileAttributesA
GetFileSize
lstrcatA
GetFullPathNameA
SearchPathA
lstrlenA
lstrcpyA
CopyFileA
RemoveDirectoryA
GetModuleFileNameA
GetModuleHandleA
lstrcpynA
GetShortPathNameA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

user32

GetDlgItemTextA
SendDlgItemMessageA
SetWindowTextA
CreateWindowExA
ShowWindow

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text1
Size: 49KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.T�
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b566ad5bacf2c25a56b192a6825d69c0

Headers

File Characteristics

Imports

kernel32

advapi32

version

user32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 6KB - Virtual size: 35KB

.rsrc Size: 2KB - Virtual size: 1KB

.text1 Size: 49KB - Virtual size: 79KB

.T� Size: - Virtual size: 260KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 6KB - Virtual size: 35KB

.rsrc
Size: 2KB - Virtual size: 1KB

.text1
Size: 49KB - Virtual size: 79KB

.T�
Size: - Virtual size: 260KB