2cfeb0cc7e7a2ed26f490b2e2837dded_JaffaCakes118

General

Target

2cfeb0cc7e7a2ed26f490b2e2837dded_JaffaCakes118
Size

120KB
MD5

2cfeb0cc7e7a2ed26f490b2e2837dded
SHA1

5e122833b6220ea05e6bccca7c8c2c3c7cfdf861
SHA256

593d26debbf5354aa9962dffffe90550450c0977c1e8e6c4e3f81250e58b2831
SHA512

8f8387ddcec100bcc87d7d5308a750544bf1bf40ba21ec84728cd5421c8ccd481dff718f4d3b9447e4c31923f3f6e572b91aa6d3ec6127050c8d5293dcde2006
SSDEEP

1536:wNnBkFWg4K0rX+0oT60XCsJUEbooPRrKKR:iBpg47a0oTLXCsJltZrpR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cfeb0cc7e7a2ed26f490b2e2837dded_JaffaCakes118

Files

2cfeb0cc7e7a2ed26f490b2e2837dded_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d3d4b80d678e794bc4500edfaedee52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CopyFileA
SetFileAttributesA
GetWindowsDirectoryA
GetSystemDirectoryA
CreateProcessA
GetStartupInfoA
SetFileTime
CloseHandle
GetFileTime
CreateFileA
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetFileAttributesA
GetExitCodeProcess
WaitForSingleObject
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cleaned
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1d3d4b80d678e794bc4500edfaedee52

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 28KB - Virtual size: 28KB

.cleaned Size: 56KB - Virtual size: 53KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 28KB - Virtual size: 28KB

.cleaned
Size: 56KB - Virtual size: 53KB