07c1210e301d8d204caff0071cf79ca2_JaffaCakes118

General

Target

07c1210e301d8d204caff0071cf79ca2_JaffaCakes118
Size

48KB
MD5

07c1210e301d8d204caff0071cf79ca2
SHA1

83b3748310d0bee959f53c1353a0c52c003ac471
SHA256

0d0171f767ac70672e47d5520fe46d3fc356691b4c1ed15eb2e0d188a4a2f9b5
SHA512

e7a064e2204de816af786ca575926ece58d237d2d0fce6ea4a86f7902b3cd946244c9748e74d657253bbaf27b2a5bb001ec4f8e59be219625c18d0567cb7cc89
SSDEEP

768:PjzHtsT9OyQSKwYH2H+J87Mo68uVK8jjM2ELGtZM/oGVkXs9APZ0BFXgYKWILMMW:PjzaT9OyQAYH2+yb2Eqt+/ow2Pm2ls8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07c1210e301d8d204caff0071cf79ca2_JaffaCakes118

Files

07c1210e301d8d204caff0071cf79ca2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fa80fe8b29d86ae623339fd88092559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
Sleep
FindFirstFileA
lstrcpyA
GetLastError
CreateMutexA
GetProcAddress
LoadLibraryA
GetLocaleInfoA
GetACP
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
CreateFileA
WriteFile
GetSystemDirectoryA
GetFileTime
MoveFileExA
CreateDirectoryA
WaitForSingleObject
CreateProcessA
FindClose
FindNextFileA
GetDriveTypeA
TerminateThread
MoveFileA
DeleteFileA
SetFileAttributesA
CopyFileA
CreateThread
WinExec
CloseHandle
WaitForMultipleObjects
SetFileTime
LCMapStringA
FlushFileBuffers
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetOEMCP
SetStdHandle
LCMapStringW

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3fa80fe8b29d86ae623339fd88092559

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 10KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 10KB