2e8f6c8015d564d27035661245011557_JaffaCakes118

General

Target

2e8f6c8015d564d27035661245011557_JaffaCakes118
Size

56KB
MD5

2e8f6c8015d564d27035661245011557
SHA1

253a66f6b85d96a0fff8323d98f86a05966105fb
SHA256

199d69dfe8196d1e6bcd2611e85d42a3817fac26dd64fcdc71dbd7495b5b2b83
SHA512

c9eb561c0b1a9770a2f1fa051ab94250c2aa0311ba689b8fdc896ef2db6365756e9850b215a15d4ece8a6075587461d0c3748d751c045d92048d62a0b1c129e8
SSDEEP

1536:0Lt3/cniLLQeHj+QKOg5pP3MNcHUeBcGJH:0p/cILQeAzP8Nc0eBcGF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e8f6c8015d564d27035661245011557_JaffaCakes118

Files

2e8f6c8015d564d27035661245011557_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f73c4e5c426fd33d8a920944a63f69e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
SetFilePointer
GetSystemDirectoryA
CloseHandle
GetLastError
lstrcatA
lstrcpyA
FindFirstFileA
Sleep
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
WriteFile
CreateFileA
SizeofResource
LoadResource
DeleteFileA
CreateEventA
CreateProcessA
ReadFile
OpenProcess
CreateRemoteThread
GetProcAddress
WriteProcessMemory
VirtualAllocEx
GetCurrentProcessId
GetCurrentProcess
Process32Next
lstrcmpA
lstrlenA
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
FindNextFileA
FindClose
GetTickCount
FindResourceA
GetTempFileNameA

user32

wsprintfA
CharUpperA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f73c4e5c426fd33d8a920944a63f69e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 44B

.rsrc Size: 38KB - Virtual size: 38KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 44B

.rsrc
Size: 38KB - Virtual size: 38KB