084e53b5570e40e16af6b4b33444b702_JaffaCakes118

General

Target

084e53b5570e40e16af6b4b33444b702_JaffaCakes118
Size

432KB
MD5

084e53b5570e40e16af6b4b33444b702
SHA1

528686d30f6cd50cefc36e38592e447dfe6072be
SHA256

b3806701a5c891f1c4c1cb58e9e01a5aad5e46778dc0ae4d6e0454876c47e693
SHA512

594562ddb3daf340006b9e824690bd9ed6cf622624ec6c5d2ad295e4c154a28a9fcb69489e021c55444b0983175e08a7d6d74bfb29bb0bbb9da4eabebc4497bc
SSDEEP

6144:H/bg+UHC0isGbH5SZdwge9DkfxgueTw9RILsaSJ:Ed4HkZ+hDkfxyw9RILsau

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
084e53b5570e40e16af6b4b33444b702_JaffaCakes118

Files

084e53b5570e40e16af6b4b33444b702_JaffaCakes118
.exe windows:4 windows x86 arch:x86

763559f7b237017efc45ce6da4103f1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetFileAttributesA
GetProcAddress
FormatMessageA
SearchPathA
GetPrivateProfileStringA
VirtualAlloc
GetUserDefaultLCID
GetStringTypeA
LCMapStringW
ExpandEnvironmentStringsA
LoadLibraryExA
VirtualFree
GetLastError
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
GetStringTypeW

user32

MessageBoxA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Exports

Exports

LVRTTable

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

763559f7b237017efc45ce6da4103f1f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

version

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 12KB - Virtual size: 9KB