416ea19b7d4e044154e2c1fd166deb91_JaffaCakes118

General

Target

416ea19b7d4e044154e2c1fd166deb91_JaffaCakes118
Size

19KB
MD5

416ea19b7d4e044154e2c1fd166deb91
SHA1

56f5086fdddd54d1d5c4cd3b743e57b50c889415
SHA256

965f0bdbfc2593ffea25e6d5d582a470aa9ea16829026df658a5fc9125a85d0b
SHA512

44e8609ae9f380e27990d9e9c4b03b7a4319663151756b1458822196d20affd8cbd4918b1d7f911da1a8d245da6a99315f12bb3648055d544e180d9a757951be
SSDEEP

384:itVubmp/aGb27E1klzrSFwiyaiH8ihnG7Zg6Th0aogRYPp4k31cWzWJlW:itVub2/aXE187XHtFE+1gRA6kl2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
416ea19b7d4e044154e2c1fd166deb91_JaffaCakes118

Files

416ea19b7d4e044154e2c1fd166deb91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cedc8b72641b7fbc9fb34a3c4e7070f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetCurrentProcess
IsBadReadPtr
GetModuleHandleA
OutputDebugStringA
GetTempPathA
GetModuleFileNameA
WriteFile
SetFilePointer
CreateFileA
GetTickCount
lstrcpyW
TerminateProcess
OpenProcess
WinExec
GetTempFileNameA
Sleep
GetSystemDirectoryA
GetPrivateProfileStringA
lstrcmpiA
ExitProcess
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
DeleteFileA
SetEvent
CreateEventA
OpenEventA
WritePrivateProfileStringA
ReleaseMutex
CreateMutexA
FreeLibrary
WaitForSingleObject
ResetEvent
SetFileAttributesA
CopyFileA
GetFileAttributesA
CreateDirectoryA
CreateThread
GetStartupInfoA
GetWindowsDirectoryA
CloseHandle

user32

wsprintfA

advapi32

LookupPrivilegeValueA

shlwapi

PathRemoveFileSpecA

msvcrt

_acmdln
_stricmp
_controlfp
??2@YAPAXI@Z
_except_handler3
strrchr
atoi
sprintf
_exit
_XcptFilter
exit
_itoa
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cedc8b72641b7fbc9fb34a3c4e7070f4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1008B

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1008B