21ec86c46cc0366fabbc570a8cf3249a_JaffaCakes118

General

Target

21ec86c46cc0366fabbc570a8cf3249a_JaffaCakes118
Size

27KB
MD5

21ec86c46cc0366fabbc570a8cf3249a
SHA1

ea1fbb1ce75ccdcb048aab7828f9fcbd7426497a
SHA256

b9345837d570ec5773c67a7a9f8b1348cb56a254e03911538a1546a60065e5cc
SHA512

825ab3288ebe60de94aa9a5763ecb52418a1ccc2f251cc29893c20d4699c82dd00f503a3ef304aaece0c1ece632f0dd93f2914722f07fb40f4e5f9d00560719a
SSDEEP

768:0aTTLiVBaO982JgfBNVg5LMVpoWeQ4/tD:PLk91EB/gUpolX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21ec86c46cc0366fabbc570a8cf3249a_JaffaCakes118

Files

21ec86c46cc0366fabbc570a8cf3249a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

611d816f1462fa3361766fb1dc7b2a1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

kernel32

AddAtomA
CloseHandle
CreateToolhelp32Snapshot
ExitProcess
FindAtomA
GetAtomNameA
OpenProcess
Process32First
Process32Next
ReadProcessMemory
SetUnhandledExceptionFilter
Sleep
VirtualAllocEx
VirtualFreeEx
WriteProcessMemory
lstrcmpiA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memcpy
memset
signal
strcpy
strstr
time

shell32

ShellExecuteA

user32

FindWindowA
FindWindowExA
GetWindowLongA
SendInput
SendMessageA
SetLayeredWindowAttributes
SetWindowLongA
SetWindowPos

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 848B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

611d816f1462fa3361766fb1dc7b2a1b

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

user32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 368B

.rdata Size: 1024B - Virtual size: 784B

.bss Size: - Virtual size: 848B

.idata Size: 19KB - Virtual size: 22KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 368B

.rdata
Size: 1024B - Virtual size: 784B

.bss
Size: - Virtual size: 848B

.idata
Size: 19KB - Virtual size: 22KB