b1d1afb1a54fed3f027cd99c8181671a_JaffaCakes118

General

Target

b1d1afb1a54fed3f027cd99c8181671a_JaffaCakes118
Size

88KB
MD5

b1d1afb1a54fed3f027cd99c8181671a
SHA1

b507554b9e71ac3c2f89f691ffcb189dc8946937
SHA256

bb0213a5ed85bed9503a1fffab3a88a9e0c9d80f068ae47e0a213d2dac072bd6
SHA512

c6571c560f3e6783bf83f6284b895384ab68916ca9c9601a4d03fe4214b2967bb44566cea710b13c96318fdf32f1169e3160ce0f578403ee3d1d23fafd449ba7
SSDEEP

1536:ezoAkP0dt3VS1b/2SyP/4SZDVSc4vSJhSnJ/Sa+SZEiSjOSSjP/9SJE+SjJSJ:ew0dtFSJ2SS4SjSPSLSNSRSDSXSD9SnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1d1afb1a54fed3f027cd99c8181671a_JaffaCakes118

Files

b1d1afb1a54fed3f027cd99c8181671a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d32898bfa654c720da956964cf0a8ed5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetLastError
CopyFileA
CloseHandle
ReadFile
WinExec
GetComputerNameA
Sleep
GetSystemDirectoryA
GetVersionExA
LocalFree
LocalAlloc
MultiByteToWideChar
GetLocalTime
SetFilePointer
LockFile
WriteFile
GetCurrentDirectoryA
CreateFileA
GetStringTypeW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetStringTypeA
UnlockFile
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
GetFileType
HeapDestroy
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetCPInfo
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetACP

user32

SetForegroundWindow
wsprintfA
FindWindowA
MessageBoxA

advapi32

GetUserNameA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d32898bfa654c720da956964cf0a8ed5

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 60KB - Virtual size: 93KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 60KB - Virtual size: 93KB