0741a1830a1533d499c2038768d3deae_JaffaCakes118

General

Target

0741a1830a1533d499c2038768d3deae_JaffaCakes118
Size

192KB
MD5

0741a1830a1533d499c2038768d3deae
SHA1

b91e7a8b69a4c8e6887ea2302fa44ee74c29b681
SHA256

06827da10ded8e21904644041887240a152352a2709a326bab95e637866ccb43
SHA512

3ed8b51527f4b67f8e3bfa6199c835fab1d56f6490ad5b17ab684f75d1ac2a6f39888c2ed345cd47e850e61e40ff76ccd024d1b12019477b2807c100039f02bd
SSDEEP

3072:naDiCoKnWncEiArFyThA+l3qMbcE701jPh8/4Oha:aDRoKnWncsrFyTm+l35cEYpGAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0741a1830a1533d499c2038768d3deae_JaffaCakes118

Files

0741a1830a1533d499c2038768d3deae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

431d7c54478a4ef336619a536898b348

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FlashWindow
GetActiveWindow
wsprintfA

shlwapi

PathFileExistsA
SHGetValueA
SHDeleteKeyA
SHCopyKeyA

kernel32

DeleteFileA
IsBadWritePtr
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetTickCount
GetFileAttributesA
SetFileAttributesA
GetProcAddress
GetModuleHandleA
GetLastError
Sleep
ExitProcess
LoadLibraryA
GetCurrentDirectoryA
GetTempPathA
CloseHandle
WriteFile
SetFilePointer
CreateFileA
WaitForSingleObject
GetCurrentProcess
CreateEventA
ExpandEnvironmentStringsA
GetSystemDirectoryA
SetEnvironmentVariableA
SleepEx
SetUnhandledExceptionFilter
CreateProcessA
GetStartupInfoA
CopyFileA
GetCommandLineA
GetCurrentThreadId
GetModuleFileNameA
CreateDirectoryA

msvcrt

_controlfp
_itoa
_except_handler3
memset
__CxxFrameHandler
memmove
srand
rand
_ftol
tolower
strncmp
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

ws2_32

closesocket
getprotobynumber

Sections

CODE
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

431d7c54478a4ef336619a536898b348

Headers

File Characteristics

Imports

user32

shlwapi

kernel32

msvcrt

ws2_32

Sections

CODE Size: 20KB - Virtual size: 17KB

.data Size: 164KB - Virtual size: 166KB

.rsrc Size: 4KB - Virtual size: 3KB

CODE
Size: 20KB - Virtual size: 17KB

.data
Size: 164KB - Virtual size: 166KB

.rsrc
Size: 4KB - Virtual size: 3KB