fc1e81fa22906c83815ce76f08526a3b_JaffaCakes118

General

Target

fc1e81fa22906c83815ce76f08526a3b_JaffaCakes118
Size

38KB
MD5

fc1e81fa22906c83815ce76f08526a3b
SHA1

390fd25ccccaff2b49d7d832e1629937d51aed0b
SHA256

c66bb93788a39902997782d7f2f23dfd6f43a5385672f3ff6b13bfd3cd4c19bc
SHA512

6bca50ba3cc821b3fbe3042f15971f636d545764bc64edf8ab720f5837c03cd2535211f4f1c56eb2dbe35b4a15c0ad70c5ce9dcfa70811d0b78cb7abe531ec34
SSDEEP

768:B6nrRdcV8Q97+53NVOCxHgLa1Ey7YdadkcgrH:BqjcOk+53rOCeLaxHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc1e81fa22906c83815ce76f08526a3b_JaffaCakes118

Files

fc1e81fa22906c83815ce76f08526a3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c610a91067bd1ceaaf0970cf936c24f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFilePointer
WriteFile
lstrcatA
lstrcpyA
CreateFileA
GetFileAttributesA
CreateDirectoryA
GetSystemDirectoryA
lstrlenA
GetVersionExA
Process32Next
Process32First
CreateToolhelp32Snapshot
ExitThread
Sleep
DeleteFileA
TerminateThread
WaitForMultipleObjects
GetModuleFileNameA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetCurrentDirectoryA
SetEndOfFile
RemoveDirectoryA
ReadFile
LoadLibraryA
GetProcAddress
SetFileTime
ResetEvent
lstrcmpA
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleA
CreateEventA
SetEvent
CreateThread
WaitForSingleObject
GetTickCount
CreateProcessA
CompareStringA
SizeofResource
LoadResource
FindResourceA

user32

TranslateMessage
IsWindow
wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
GetClassLongA
PeekMessageA
CreateWindowExA

advapi32

RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegNotifyChangeKeyValue
RegEnumKeyA
RegCloseKey

wininet

InternetGetConnectedState

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c610a91067bd1ceaaf0970cf936c24f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

iphlpapi

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 668B

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 668B

.rsrc
Size: 6KB - Virtual size: 6KB