18527c37d6b6df9f820e0afb01d542e5_JaffaCakes118

General

Target

18527c37d6b6df9f820e0afb01d542e5_JaffaCakes118
Size

36KB
MD5

18527c37d6b6df9f820e0afb01d542e5
SHA1

6bf81c7e1e80b2bf9c09fbfbe8d18e4d0778f8f0
SHA256

7a9d8e715b5578e17c1174b4d0b376d2d5cc487a7e94bf00b82cb23c902b7649
SHA512

042c5d8f4e0cf0d3d9dc82d0f121d2bbfa304c39cc7dc8c08af3ea76bf21c2bc66f2a279ec9c8eeef02cce0ba46b4945fab324a11233ab446be424f304fbb084
SSDEEP

384:5KVOAZGuazRZWezJP2LmCzyD1zP04dUq+Rj+bAdezWrULus9BUP4v6bKp1TgvcD:y8pNzeLmIWQ4yqV08zWr8MGT9scD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18527c37d6b6df9f820e0afb01d542e5_JaffaCakes118

Files

18527c37d6b6df9f820e0afb01d542e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbe3822e1f8be7ba7c5eba50036160c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasDeleteEntryA
RasSetEntryPropertiesA
RasDialA
RasGetConnectStatusA
RasHangUpA
RasEnumConnectionsA
RasEnumDevicesA
RasEnumEntriesA
RasGetEntryPropertiesA

comctl32

ord17

kernel32

CompareStringA
FlushFileBuffers
RtlUnwind
CompareStringW
SetEnvironmentVariableA
GetVersionExA
Sleep
GetLastError
CreateMutexA
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
WideCharToMultiByte
GetTimeZoneInformation
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
CloseHandle
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetFilePointer
HeapAlloc
HeapReAlloc
HeapSize
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
IsBadWritePtr
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbe3822e1f8be7ba7c5eba50036160c6

Headers

File Characteristics

Imports

rasapi32

comctl32

kernel32

advapi32

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 728B

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 728B