225d028cdce8eed8a91596b7c17bcd49_JaffaCakes118

General

Target

225d028cdce8eed8a91596b7c17bcd49_JaffaCakes118
Size

785KB
MD5

225d028cdce8eed8a91596b7c17bcd49
SHA1

39c3ec032c562bcbdc5c3b6b730baf974f258cea
SHA256

471f45fb1e6fd2d26b6aff68c71a54b392b210752fcff909b2b4abd81b2c9422
SHA512

80ad75dd7c7d9449946e3f9057b6ddf747cd34d379c7eb5cbb72ffbc149a831ad1af76b287bc8748ac0b86a6c845c94b7918512fe1aaa71a750b167b761dd721
SSDEEP

24576:zkqm3JoGoKaU52BpXpJf19Rghfju4L+dmbtut:zhmOooB5pJj+i4LcTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
225d028cdce8eed8a91596b7c17bcd49_JaffaCakes118

Files

225d028cdce8eed8a91596b7c17bcd49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57831fe1c9a614fb3bbec5ab7a726840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_wsplitpath
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
free
calloc
memcpy
_except_handler3
memchr
memcmp
strstr
_itoa
strlen
??2@YAPAXI@Z
??3@YAXPAX@Z
wcsstr
wcschr
wcslen
wcscat
memset
wcsncpy
__CxxFrameHandler
wcscpy

kernel32

GetStartupInfoA
GetFileSize
CreateFileMappingA
GetFileTime
SetFileTime
MapViewOfFile
ExitThread
GetModuleFileNameW
UnmapViewOfFile
FormatMessageA
CreateFileW
SetFilePointer
WriteFile
lstrlenA
LocalFree
GetCurrentProcess
WaitForSingleObject
GetExitCodeThread
CreateProcessW
CloseHandle
ResumeThread
GetLastError
ExitProcess
GetTempPathW
GetFileAttributesW
CreateDirectoryW
CreateThread
LoadLibraryA
FreeLibrary
GetDiskFreeSpaceW
GetProcAddress
GetModuleHandleA
CreateMutexA

user32

SetForegroundWindow
ShowWindow
FindWindowA
wsprintfA
DestroyWindow
MessageBoxA
SetWindowTextA
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfW
PostQuitMessage
CreateDialogParamA

advapi32

RegDeleteValueW
RegQueryValueExW
RegOpenKeyExA
RegCloseKey

shell32

SHGetPathFromIDListW
SHBrowseForFolderW

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.6data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

57831fe1c9a614fb3bbec5ab7a726840

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

shell32

Sections

.text Size: 15KB - Virtual size: 14KB

.data Size: 6KB - Virtual size: 7KB

.rsrc Size: 5KB - Virtual size: 5KB

.6data Size: 72KB - Virtual size: 72KB

.text
Size: 15KB - Virtual size: 14KB

.data
Size: 6KB - Virtual size: 7KB

.rsrc
Size: 5KB - Virtual size: 5KB

.6data
Size: 72KB - Virtual size: 72KB