31a619b0666d128b0a337383acc2aa7f_JaffaCakes118

General

Target

31a619b0666d128b0a337383acc2aa7f_JaffaCakes118
Size

54KB
MD5

31a619b0666d128b0a337383acc2aa7f
SHA1

3d768f6ae3ed29e490b10c3421bb5342b119d7f5
SHA256

a86fc1a2db0d7a25faf9a7a63b817a6a27ae8ec4a616755a0f970be68fa1dc96
SHA512

ee5d0de3a583381829248d767870bd00bd3d51e5e57e8da1e97255e2021acbadd59dde9e4908685868829e6e1a28205e9f43974a2ac4d47999060d9ac4446d9a
SSDEEP

768:CiM36IGKLps+IzuilQLiy3CDOSAcaDlJcXAz7jop2bOZQz:ChLGKLpKQLiy3GOP5DlegfopwOZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31a619b0666d128b0a337383acc2aa7f_JaffaCakes118

Files

31a619b0666d128b0a337383acc2aa7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ec885a8976f429fa210d0be30833fa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
Sleep
GetModuleFileNameA
GetModuleHandleA
GetLogicalDrives
GetStartupInfoA
GetCommandLineA
GetFileAttributesA
GetComputerNameA
GetWindowsDirectoryA
FreeLibrary
GetProcAddress
GetCurrentProcessId
LoadLibraryA
SetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
UnhandledExceptionFilter
RtlUnwind
VirtualFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetVersion
HeapAlloc
HeapFree
CreateProcessA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
GetExitCodeProcess
WaitForSingleObject
WriteFile
VirtualAlloc
HeapReAlloc
SetFilePointer
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadFile
CreateFileA
SetEndOfFile

advapi32

RegCreateKeyA
RegSetValueExA
RegCloseKey

winmm

timeGetTime

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ec885a8976f429fa210d0be30833fa4

Headers

File Characteristics

Imports

kernel32

advapi32

winmm

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 928B

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 928B