367fe2a0cd6e5040c0bc2ba4251165f1_JaffaCakes118

General

Target

367fe2a0cd6e5040c0bc2ba4251165f1_JaffaCakes118
Size

76KB
MD5

367fe2a0cd6e5040c0bc2ba4251165f1
SHA1

184a801075ef991c8372896ef69815b821282775
SHA256

830a23b4bfbbb98537ec06f04a49c47bd4ca0f159247af51c8c5bbb4150c4a7d
SHA512

40b3c5f60cc626340dd4b40b4a6190a1b9274c53a191af1aecaf3736e6a9db4a39fbcd5ec075d60744a2cf79968ef41a8c5685367aeeafb8310261a000ebc501
SSDEEP

768:NQ2dVpJN3OVA/oOjtTzCg7gmqfZ/YUkKWxwX9MFJ0Vb:t5sAntPClmqmUkKT0J0V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
367fe2a0cd6e5040c0bc2ba4251165f1_JaffaCakes118

Files

367fe2a0cd6e5040c0bc2ba4251165f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1effc712697039dab029cc8cef3bdc20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
ReadFile
SetFilePointer
CreateFileA
CreateProcessA
GetStartupInfoA
lstrcatA
GetSystemDirectoryA
GetWindowsDirectoryA
TerminateProcess
GetPrivateProfileStringA
GetPrivateProfileIntA
Sleep
GetCurrentThreadId
GetEnvironmentVariableA
lstrcpyA
GetShortPathNameA
GetModuleFileNameA
WaitForSingleObject
CreateThread
GetVersionExA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetEnvironmentStringsW
GetEnvironmentStrings
HeapFree
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte

user32

wsprintfA
SetThreadDesktop
PostThreadMessageA
GetInputState
GetThreadDesktop
GetMessageA
CreateDesktopA
CloseDesktop

shell32

ShellExecuteA
SHGetSpecialFolderPathA

urlmon

URLDownloadToCacheFileA

wininet

DeleteUrlCacheEntry

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1effc712697039dab029cc8cef3bdc20

Headers

File Characteristics

Imports

kernel32

user32

shell32

urlmon

wininet

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 44KB - Virtual size: 41KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 44KB - Virtual size: 41KB

.rsrc
Size: 4KB - Virtual size: 2KB