e98ce6d800926cba0073a7c5f0e63cec_JaffaCakes118

General

Target

e98ce6d800926cba0073a7c5f0e63cec_JaffaCakes118
Size

32KB
MD5

e98ce6d800926cba0073a7c5f0e63cec
SHA1

eb08cc03933f5317a5a8fa45d482da90dc262d4e
SHA256

73b8ae2218edb6bd2a65ef1911e98404196afabcfcc3f6fc480d4ee58c32561b
SHA512

145fb89faa4537dc801fab87c490cc95cb4c40f72f0de902cfae815f8fa9f664eb4dbbfc5a328af215330cddbc94697bea1e36614f0f62c521b70316cddb5ce2
SSDEEP

768:gn84XbXgT7GgFEWrrfXbkeTwLsvRHfhGpm0AJ:WrXBor/gAwLs5Hcp3AJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e98ce6d800926cba0073a7c5f0e63cec_JaffaCakes118

Files

e98ce6d800926cba0073a7c5f0e63cec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b89bc69b14cfc6628f544dd727a3e58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
GetFileSize
CreateFileA
lstrlenA
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
GetTickCount
LoadLibraryA
HeapAlloc
GetProcessHeap
Sleep
lstrcatA
WaitForSingleObject
GetLastError
CreateMutexA
ExitProcess
DeleteFileA
HeapFree
CopyFileA
ReleaseMutex
GetTempPathA
HeapDestroy
HeapCreate
ReadFile
Process32First
lstrcmpiA
CreateToolhelp32Snapshot
GetProcAddress
GetCompressedFileSizeA
GetFileAttributesA
SetLastError
Module32Next
Module32First
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetComputerNameA
lstrcmpA
WideCharToMultiByte
GetFileTime
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
CloseHandle
Process32Next
WriteFile

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b89bc69b14cfc6628f544dd727a3e58

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 14KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 14KB