21930844f02ae27c939a9602bbbfb0dd_JaffaCakes118

General

Target

21930844f02ae27c939a9602bbbfb0dd_JaffaCakes118
Size

49KB
MD5

21930844f02ae27c939a9602bbbfb0dd
SHA1

3c44d17dd7dd4e86cbc445072cceefd8a5c3e475
SHA256

2059eb6159b2dda866002cade33746dadefcbcd935bba1a594bc8d7ad004e254
SHA512

515c192933562fffbef7f01e7fe043d4c7b306ea0107f036afa1f3738517437019b36a5b6d0901e314e1a6bff6a76f3c5a0007b420c190eb6d549fdae281c49b
SSDEEP

768:VjDGORtePlcr6l+FZEaAZhSRphKa0UwCJea8Eplt29V3FEB/uSsSOzK:5DGIeWk+pAONKa1NhMFFO/uSAzK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21930844f02ae27c939a9602bbbfb0dd_JaffaCakes118

Files

21930844f02ae27c939a9602bbbfb0dd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a8994c374a99f11889ed7002bb7ab895

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrNCatA

netapi32

NetUserGetInfo

kernel32

GetLastError
CreateMutexA
CloseHandle
GetVersion
ExitProcess
lstrcatA
WinExec
DeleteFileA
lstrcpyA
CreateFileA
FindResourceA
FreeResource
LoadResource
SetFileTime
WriteFile
SizeofResource
FindFirstFileA
LockResource
GetModuleHandleA
GetShortPathNameA
MapViewOfFile
UnmapViewOfFile
Process32First
GetTempPathW
CreateRemoteThread
OpenProcess
Sleep
lstrcmpiA
GetProcAddress
Process32Next
CreateFileMappingA
GetExitCodeThread
CreateToolhelp32Snapshot
SetFilePointer
VirtualFree
GetSystemDirectoryW
GetExitCodeProcess
CreateFileW
VirtualAlloc
GetModuleFileNameA
lstrcatW
lstrcpyW
GetEnvironmentVariableA
GetSystemDirectoryA
GetTickCount
GetCurrentProcess
lstrlenA
WaitForSingleObject

user32

wsprintfA

advapi32

RegCreateKeyA
RegQueryValueExA
RegSetValueExA
InitiateSystemShutdownExA
GetUserNameW
OpenProcessToken
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueA

shell32

ShellExecuteExA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8994c374a99f11889ed7002bb7ab895

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

netapi32

kernel32

user32

advapi32

shell32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 38KB - Virtual size: 38KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 38KB - Virtual size: 38KB