3a4ff75f2ceac9047cdb165048728b20_JaffaCakes118

General

Target

3a4ff75f2ceac9047cdb165048728b20_JaffaCakes118
Size

83KB
MD5

3a4ff75f2ceac9047cdb165048728b20
SHA1

f032e972bc2c06f363bf388e3df919cd911dcda6
SHA256

f0c33bd6145a834ed0dbdf778493278ebdc64046c12f5b4d9bf4d1131734f1a1
SHA512

a1a67f1e19d927d12d3c4fba5c5a34cb239bbb1cbc0f717653b370af8244a05aba11d58e986067b9886f8b933ea77fb3472dd7e4ba675aed85028408987ef9e5
SSDEEP

1536:Nqqtdaj1be48wN/FQYFMdc4mM4Cazm4CazMfaiBZ:Nv+1qRM/FSFRaca4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a4ff75f2ceac9047cdb165048728b20_JaffaCakes118

Files

3a4ff75f2ceac9047cdb165048728b20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1212bb6c1ae720d44f6ee20360a5ea38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeviceIoControl
CreateFileA
GetVolumeInformationA
ExitProcess
TerminateProcess
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
IsBadWritePtr
GetComputerNameA
WriteFile
lstrlenA
GetFileType
GetCurrentProcessId
lstrcatA
GetWindowsDirectoryA
GetSystemDirectoryA
GetTickCount
GetVersionExA
GetTempPathA
Sleep
lstrcpyA
CreateProcessA

user32

wsprintfA
SendMessageA
FindWindowA
GetWindow

shell32

ShellExecuteExA
SHChangeNotify
SHGetSpecialFolderPathA

msvcrt

strncpy
sprintf
_strdup
_except_handler3
atoi
rand
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
__CxxFrameHandler
strncat
atol

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

shlwapi

PathGetDriveNumberA

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 79KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1212bb6c1ae720d44f6ee20360a5ea38

Headers

File Characteristics

Imports

kernel32

user32

shell32

msvcrt

msvcp60

shlwapi

wininet

Sections

.text Size: 79KB - Virtual size: 82KB

.rdata Size: 2KB - Virtual size: 2KB

.text
Size: 79KB - Virtual size: 82KB

.rdata
Size: 2KB - Virtual size: 2KB