1a9b49a1a9e008510571c6ef937d27d6_JaffaCakes118

General

Target

1a9b49a1a9e008510571c6ef937d27d6_JaffaCakes118
Size

28KB
MD5

1a9b49a1a9e008510571c6ef937d27d6
SHA1

9e94c58bd16e1d682c3cf2ea51e25379f859a32e
SHA256

93e6d0753e0a5d418412d99acb63678cb9a524d352554d3fcf0de9819f07d094
SHA512

47617d0e2369bda4005c52f1c2aa05a4ef79a226fbaffa8d53bdbac0b30ac9041d8a0a68480d061713b2a5f153c34aac6f3f153b286fd570649f3d1de8ba27e2
SSDEEP

384:zoGkffkRdQro6C/8pXA3Q7Ox+XmYemOid5GmgoY1Ngp:mffDrXyEQ3um+WY8id5Ao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a9b49a1a9e008510571c6ef937d27d6_JaffaCakes118

Files

1a9b49a1a9e008510571c6ef937d27d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65aa989bd9528ecd9830c56cc5825a99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
FindClose
FindNextFileW
FindFirstFileW
CreateFileW
FreeResource
GetProcAddress
LoadLibraryW
GetModuleHandleW
WriteFile
Sleep
GetFileSize
SetFilePointer
CloseHandle
ReadFile
SizeofResource
GetModuleFileNameW
GetStartupInfoW

user32

DispatchMessageW
TranslateAcceleratorW
TranslateMessage
GetMessageW
LoadAcceleratorsW
LoadStringW
SendMessageW
EndDialog
DefWindowProcW
DestroyWindow
RegisterClassExW
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
CreateWindowExW
ShowWindow
UpdateWindow
LoadIconW
LoadCursorW
DialogBoxParamW

advapi32

RegCloseKey
RegOpenKeyExW
GetUserNameW
RegSetValueExW
RegQueryValueExW

msvcrt

wcscpy
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
wcsncmp
wcsncpy
??3@YAXPAX@Z
wcslen
wcsstr
wcscat

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65aa989bd9528ecd9830c56cc5825a99

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 12KB - Virtual size: 8KB