1b1f21ce4294728ca99fbd73210218c5_JaffaCakes118

General

Target

1b1f21ce4294728ca99fbd73210218c5_JaffaCakes118
Size

35KB
MD5

1b1f21ce4294728ca99fbd73210218c5
SHA1

db1c23299cc4382b84e28391f25ba2a56148831f
SHA256

ec8d01857d95519fb23d417868f055274b8bfa06cbc47e14037f512443fc3af6
SHA512

1db8459481582f3e4052df550ef31c793bf6559a4ad816c6d7d91a5d66a4e28bd72791162276b103c00585ac526c77aad018960e3ba245caea15b3b82f94f16c
SSDEEP

384:GnRwkZ5o/1mXwVmjPJtbMEvIQTwiYfC0pJgLa0Mp888SG0YCItDzcaqhHMF7MXHD:GnRwkZkgxtbMEfwfdgLa1Hs0Ydtnc79L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b1f21ce4294728ca99fbd73210218c5_JaffaCakes118

Files

1b1f21ce4294728ca99fbd73210218c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

043b291c1cc5efe0a86473adfb31c3bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
CreateFileA
GetFileAttributesA
CreateDirectoryA
GetSystemDirectoryA
lstrlenA
ReadFile
GetVersionExA
Process32Next
Process32First
CreateToolhelp32Snapshot
ExitThread
Sleep
DeleteFileA
TerminateThread
WaitForMultipleObjects
GetModuleFileNameA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
WriteFile
SetEndOfFile
LoadLibraryExA
CloseHandle
LoadLibraryA
GetProcAddress
SetFilePointer
ResumeThread
ResetEvent
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
CompareStringA
CreateEventA
SetEvent
CreateThread
WaitForSingleObject
CreateProcessA
SizeofResource
LoadResource
FindResourceA
lstrcmpA

user32

GetClientRect
wsprintfA

advapi32

RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyA
RegNotifyChangeKeyValue
RegCloseKey

wininet

InternetGetConnectedState

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

043b291c1cc5efe0a86473adfb31c3bf

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

iphlpapi

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 424B

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 424B

.rsrc
Size: 5KB - Virtual size: 5KB