17a19e6b7a7cb916ea9040b4da6ae6e2_JaffaCakes118

General

Target

17a19e6b7a7cb916ea9040b4da6ae6e2_JaffaCakes118
Size

76KB
MD5

17a19e6b7a7cb916ea9040b4da6ae6e2
SHA1

e50725c5e635b6554bff387bdf177486dc81efb2
SHA256

f6729c9e434cb33e7e7311c56379719a3f64261a3d4967b6df000336623fa3cc
SHA512

6baa334c3190d9797ab00a0abdb4b74fda675910fa3088c4969c453829c6dd464d5e3fc1c05c3df8e4fe287750d41cc8da513a75b4005fa3ef21be5198e1393e
SSDEEP

1536:yU9+/T2nSanYImlRwRopLwIRSw87f7N+WtXsCQk56nzlvPIju:yxoYImHwRopsESw87f7N+W2k56xX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a19e6b7a7cb916ea9040b4da6ae6e2_JaffaCakes118

Files

17a19e6b7a7cb916ea9040b4da6ae6e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

338e00b9aaa73cf83ea3ff985b6f5334

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
CreateThread
ExitProcess
CopyFileA
lstrcmpiA
GetModuleFileNameA
DeleteFileA
SetFileAttributesA
GetSystemDirectoryA
CreateMutexA
Sleep
WaitForSingleObject
SetEvent
CloseHandle
OpenMutexA
GlobalFree
WriteFile
CreateFileA
LockResource
GlobalAlloc
LoadResource
SizeofResource
FreeLibrary
GetProcAddress
LoadLibraryA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
Process32Next
Thread32Next
Thread32First
Process32First
GetVersion
SetFileTime
GetFileTime
GetWindowsDirectoryA
CompareStringW
CompareStringA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA

user32

PostThreadMessageA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

338e00b9aaa73cf83ea3ff985b6f5334

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 40KB - Virtual size: 36KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 40KB - Virtual size: 36KB