2e8c298715bc96894e5f60cd7df0d971_JaffaCakes118

General

Target

2e8c298715bc96894e5f60cd7df0d971_JaffaCakes118
Size

28KB
MD5

2e8c298715bc96894e5f60cd7df0d971
SHA1

34091b035334f4c979f010dd7547c0eff093611d
SHA256

379f1ef976aaac1dc565d245fcf53cd6c4e19d6ebf25aec06ff8f4edb0c31032
SHA512

109121edc81d069bcfb193a0753729a4428491a8efa789737e54d6c5e59f1e7913306ef85baf84c4a31d365bb4902b35f52bbac7f2ffb87a71e2c01fe5ff8703
SSDEEP

768:2lJK3mei630NwTjvAAew4eYvAJvqMXFrJHBTKG:2lJkF/fYivqUBT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e8c298715bc96894e5f60cd7df0d971_JaffaCakes118

Files

2e8c298715bc96894e5f60cd7df0d971_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a1216cb510999d8b2a61021f7a8e41aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

msvcrt

_strnicmp
_strupr
_stricmp
_CxxThrowException
_controlfp
_except_handler3
__set_app_type
strchr
__p__fmode
isspace
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
strstr
__CxxFrameHandler
atoi
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
time
srand
??1type_info@@UAE@XZ

ws2_32

gethostname
gethostbyname
inet_ntoa
WSACleanup
WSAStartup

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
GetUserNameA

user32

wsprintfA

oleaut32

GetErrorInfo

kernel32

lstrlenA
lstrcpyA
lstrcmpA
GetSystemDirectoryA
CreateFileA
CloseHandle
GetFileSize
SetFilePointer
WriteFile
CreateProcessA
GetLastError
Sleep
GetVersionExA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
PeekNamedPipe
ReadFile
GetTempPathA
GetStartupInfoA
DeleteFileA
LocalFree

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1216cb510999d8b2a61021f7a8e41aa

Headers

File Characteristics

Imports

shlwapi

msvcrt

ws2_32

advapi32

user32

oleaut32

kernel32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 436B

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 436B

.rsrc
Size: 5KB - Virtual size: 4KB