JaffaCakes118_78d233a201325ab8b9dff94258ef1e16

General

Target

JaffaCakes118_78d233a201325ab8b9dff94258ef1e16
Size

166KB
MD5

78d233a201325ab8b9dff94258ef1e16
SHA1

01acef9f4f70c85c012d32a6ece398b29fb738e6
SHA256

0f927f660eaeeee88472564ae89a7080e6849fc958c2350e7b59462cfecb2982
SHA512

818d168fdae912579ae3b21150dd6c0ef3166158f4fb86e5c0d8a5858f3627e81633d9f26502d88bb552239c87d714f54d69e2036597175768589b8491a494fb
SSDEEP

3072:3kChAFZXBoWC1sg+/hieTJSWu+X5bRDwUKOch2fRBBKvAB2cO7job/6NTZYc:3kPoWC1sg+/MeTB5twUKtKdccO7je

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_78d233a201325ab8b9dff94258ef1e16

Files

JaffaCakes118_78d233a201325ab8b9dff94258ef1e16
.exe windows:4 windows x86 arch:x86

55142ff201475b513a176decee15d6cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetConsoleOutputCP
EnterCriticalSection
UnhandledExceptionFilter
GetModuleFileNameW
GetThreadPriority
LCMapStringW
DeleteCriticalSection
GetCurrentThreadId
GetProcessHeap
LeaveCriticalSection
LCMapStringA
WriteConsoleA
GetCurrentDirectoryW
HeapFree
EnumSystemLocalesA
GetVersionExA
WriteFile
TerminateProcess
GetCommandLineA
PurgeComm
GetProcAddress
HeapAlloc
CreateFileA
SetUnhandledExceptionFilter
CloseHandle
EnumResourceNamesA
MultiByteToWideChar
HeapReAlloc
GetCPInfo
GetLocaleInfoW
InterlockedDecrement
RaiseException
WriteConsoleW
WideCharToMultiByte
RtlUnwind
IsValidCodePage
ExitProcess
IsValidLocale
SetStdHandle
GlobalAlloc
InitializeCriticalSection
GetLastError
SetEndOfFile
GetCurrentProcess
InterlockedIncrement
ExitProcess
GetFullPathNameW
GetUserDefaultLCID
HeapSize
ReadFile
Sleep
IsDebuggerPresent
GetModuleHandleA
GetFullPathNameA

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

user32

GetClassLongA
MessageBoxW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

rpcrt4

UuidCreate

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55142ff201475b513a176decee15d6cb

Headers

File Characteristics

Imports

kernel32

advapi32

user32

shell32

rpcrt4

Sections

.text Size: 137KB - Virtual size: 136KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 26KB - Virtual size: 25KB

.crt Size: 512B - Virtual size: 72KB

.text
Size: 137KB - Virtual size: 136KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 26KB - Virtual size: 25KB

.crt
Size: 512B - Virtual size: 72KB