0805d368d63c8193640b84de718a4856_JaffaCakes118

General

Target

0805d368d63c8193640b84de718a4856_JaffaCakes118
Size

27KB
MD5

0805d368d63c8193640b84de718a4856
SHA1

6e5f5f4b6e20c1b8954630d8f3303de1dc84c1ae
SHA256

4c6d1669737504aed9393532bd198228d835811bee5bd98514658a47472b773c
SHA512

344de28b3dc10ca255080e4f936e6916cc10dd904edd204a47aaefe5a9b72853d5143cf36bd82345f66008b3327610b47631bb8a79391ca40dea8a41cd04fb03
SSDEEP

768:VrdvFb/YMJM5PEMT8XKLxhR03fwx7NiO:V5FbYMc8XKLNIwBkO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0805d368d63c8193640b84de718a4856_JaffaCakes118

Files

0805d368d63c8193640b84de718a4856_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6386ce688f8eb9548095542ef31be956

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
DeleteFileA
CloseHandle
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
ExitThread
lstrcatA
CreateEventA
HeapAlloc
GetProcessHeap
Sleep
ExitProcess
GetModuleHandleA
GetCommandLineA
lstrlenA
SetEvent
CreateProcessA
SetFileAttributesW
CreateThread
FindResourceA
LoadResource
WaitForSingleObjectEx
WriteFileEx
Process32First
CompareStringA
lstrcmpA
ResetEvent
WaitForMultipleObjects
WaitForSingleObject
FreeLibrary
HeapFree
CreateFileA
RtlUnwind

user32

PeekMessageA
DestroyWindow
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
ShowWindow
CreateWindowExA
wsprintfA

advapi32

RegSetValueExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegNotifyChangeKeyValue

ole32

CoInitialize
CoUninitialize

shell32

SHGetFolderPathA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6386ce688f8eb9548095542ef31be956

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 816B

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 816B

.rsrc
Size: 16KB - Virtual size: 16KB