449cb11e823f7fcb618adc07a0bb77fc_JaffaCakes118

General

Target

449cb11e823f7fcb618adc07a0bb77fc_JaffaCakes118
Size

40KB
MD5

449cb11e823f7fcb618adc07a0bb77fc
SHA1

969f780e0a26dcee8a31d9b3e60889c0e0ea5478
SHA256

fd10dc92e50cf1f3d4c69592ca135ad6059b1ce8f73018dda9e24ed5f951876d
SHA512

380e81fa8bc8e2d102d0620f7252470d2f0a09fc9a22bec7a13f9cd87b12acadf2e6ef145bf6779f34cd88dca3b2584775412a568798faa0434f8737a3dde87e
SSDEEP

768:jYj/yzUhIlezwp65vGaJz2tsAJfETNhcebNii5R:jYj/VClezwU5v/4rfETcegQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
449cb11e823f7fcb618adc07a0bb77fc_JaffaCakes118

Files

449cb11e823f7fcb618adc07a0bb77fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18972ce29319846e01144f05d36cf550

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
DeviceIoControl
DisableThreadLibraryCalls
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FindFirstFileA
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStructA
GetProcAddress
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTempPathA
GetThreadLocale
GetTickCount
GetVersionExA
HeapAlloc
HeapDestroy
HeapSize
InitializeCriticalSection
IsBadCodePtr
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalFree
LockResource
Module32First
QueryPerformanceCounter
RaiseException
ResetEvent
SetEnvironmentVariableA
SetEvent
Sleep
SystemTimeToFileTime
TerminateProcess
TlsFree
TlsSetValue
WritePrivateProfileStringA
lstrcmpA
lstrlenA

user32

GetActiveWindow
GetWindowDC
MsgWaitForMultipleObjects
SetFocus
SetWindowTextA
SystemParametersInfoA

advapi32

ChangeServiceConfigA
CloseServiceHandle
RegFlushKey
RegOpenKeyExA

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18972ce29319846e01144f05d36cf550

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 29KB - Virtual size: 28KB

.data Size: 1KB - Virtual size: 10KB

.DATA Size: 6KB - Virtual size: 8KB

.idata Size: 2KB - Virtual size: 4KB

.text
Size: 29KB - Virtual size: 28KB

.data
Size: 1KB - Virtual size: 10KB

.DATA
Size: 6KB - Virtual size: 8KB

.idata
Size: 2KB - Virtual size: 4KB