2c353b8047d4b1b5467662d721493728_JaffaCakes118

General

Target

2c353b8047d4b1b5467662d721493728_JaffaCakes118
Size

21KB
MD5

2c353b8047d4b1b5467662d721493728
SHA1

8d157a31d4900c24cc937bec2664dfaedfdb5421
SHA256

bcb0a2794b9a083a4450d2c0d38dd63d73c45348f26664d8345f8d95e0d08506
SHA512

26fc8c473be1c3f4f8a81c4a27550597b5d5b48a73753a235c95df923fb05bcd9ed91f8591809d5732f9d0a036ca0b061f000791577ba0176ffc7d01f28a442f
SSDEEP

384:6tNZ/z4wmn8caDy8D/QW4YqPnEKzwFbL4HPx21VXHPWvyWNdaeI:6tNZ/z49kDo9xEiTHPglH0J4e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c353b8047d4b1b5467662d721493728_JaffaCakes118

Files

2c353b8047d4b1b5467662d721493728_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f1b39721625370676c8e35f1c5f1a176

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
_initterm
malloc
_except_handler3
sprintf
free
atoi
strchr
memset
memcpy
_strlwr

user32

GetWindowThreadProcessId
IsWindowVisible
EnumWindows

advapi32

RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyA

kernel32

SetFileAttributesA
GetTempPathA
GetTempFileNameA
MoveFileExA
CreateDirectoryA
InterlockedDecrement
GetCurrentProcessId
InterlockedIncrement
GetFileAttributesA
lstrcatA
GetWindowsDirectoryA
InitializeCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
CreateFileA
VirtualProtect
FlushInstructionCache
GetCurrentProcess
IsBadReadPtr
GetProcAddress
LoadLibraryA
WinExec
CloseHandle
WriteFile
OpenProcess
ExpandEnvironmentStringsA
GetTickCount
Sleep
GetLastError
CreateMutexA
WideCharToMultiByte
ExitProcess
VirtualAlloc
CreateThread
OpenMutexA
GetModuleFileNameA
GetModuleHandleA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
EnterCriticalSection

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1b39721625370676c8e35f1c5f1a176

Headers

File Characteristics

Imports

msvcrt

user32

advapi32

kernel32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 2KB - Virtual size: 1KB