15c232f5573de643cf0e3f3d5bfb67fe_JaffaCakes118

General

Target

15c232f5573de643cf0e3f3d5bfb67fe_JaffaCakes118
Size

47KB
MD5

15c232f5573de643cf0e3f3d5bfb67fe
SHA1

5802d4d9cb07011863ffc65bd74c87294eeeedd6
SHA256

8bae720a9d48ac5d7b45498100b05a775a5ac2534b6670d8d3ddd49483bdbe28
SHA512

df7e1216ad99aa10c546639e3e723808d1067239345784d9ee2b9cf494139480a4d817ea24de45c890ece307aabb21e8b2a1b2168cf1f1bf006b7a0f819b3c6e
SSDEEP

768:2dWcBm1nA+142xr/xACai4jxGJd22kJUrrRZSID+2ZvonH:MBYA+mGpAJi4jxGJprOElZvoH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15c232f5573de643cf0e3f3d5bfb67fe_JaffaCakes118

Files

15c232f5573de643cf0e3f3d5bfb67fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d3bc8a1f87b94a7ed99ca2c77c26bf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
GetSystemDirectoryA
GetModuleFileNameA
TerminateProcess
GetTempPathA
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
GetStartupInfoA
DeleteFileA
GlobalLock
GlobalAlloc
lstrlenA
Sleep
FreeLibrary
CopyFileA
GetCurrentProcessId
GetProcAddress
LoadLibraryA
GetLastError
OpenProcess
Process32Next
CreateMutexA

advapi32

RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetObjectA
GetDIBits
CreateDCA

mfc42

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_setmbcp
__CxxFrameHandler
_mbscmp
exit
sscanf
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_controlfp

shell32

ShellExecuteA

user32

GetKeyboardState
GetForegroundWindow
GetClassNameA
GetWindowTextA
KillTimer
IsWindow
GetAsyncKeyState
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SetTimer
SetWindowPos
SendMessageA
GetWindowRect
EnableWindow
LoadIconA
FindWindowA

Sections

code
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4d3bc8a1f87b94a7ed99ca2c77c26bf7

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

mfc42

msvcrt

shell32

user32

Sections

code Size: 36KB - Virtual size: 36KB

.rsrc Size: 3KB - Virtual size: 4KB

.avc Size: 3KB - Virtual size: 4KB

code
Size: 36KB - Virtual size: 36KB

.rsrc
Size: 3KB - Virtual size: 4KB

.avc
Size: 3KB - Virtual size: 4KB