2561f1343f291933f236a061f3ce6242_JaffaCakes118

General

Target

2561f1343f291933f236a061f3ce6242_JaffaCakes118
Size

48KB
MD5

2561f1343f291933f236a061f3ce6242
SHA1

b69ccd8bc8a0bf064f000135cc411e1be6e22aa4
SHA256

495a6ca8e6e3da0a9f79fdc9b402072266ae89f19251e1917b740e12404d5d58
SHA512

fcc6c3aeba85bb8173f27423abe1227a3a5a719e357a41d44fc455c418daad931db70dde08a887a8b7a2bb905df6944f30debf35ae29a5dc645b6e1b649449eb
SSDEEP

768:tyTxsT1fbDHlOKAVxe8rY0BiB9l5P1IWY86GJF2tahx4B:5mKAVxeQsP1euJwtiM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2561f1343f291933f236a061f3ce6242_JaffaCakes118

Files

2561f1343f291933f236a061f3ce6242_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6d8d49cc12419b56efdef9b5b230015

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetOverlappedResult
CreateEventA
FreeLibrary
lstrcmpiA
lstrcpynA
GetProcAddress
LoadLibraryA
LocalFree
FormatMessageA
GetSystemDirectoryA
FindFirstFileA
Sleep
WinExec
CopyFileA
GetModuleFileNameA
GetModuleHandleA
GetVersion
ExitThread
ResetEvent
CreateThread
DeviceIoControl
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
LCMapStringW
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
CreateFileA
GetLastError
LCMapStringA
GetVersionExA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte

user32

UpdateWindow
GetSystemMetrics
KillTimer
SendMessageA
MessageBeep
PostQuitMessage
DefWindowProcA
CreateWindowExA
LoadAcceleratorsA
ShowWindow
PostMessageA
SetTimer
RegisterClassA
wsprintfA
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6d8d49cc12419b56efdef9b5b230015

Headers

File Characteristics

Imports

kernel32

user32

version

advapi32

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 1KB