44c2a2c2bbd741b08bfcc10b2630923c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

44c2a2c2bbd741b08bfcc10b2630923c_JaffaCakes118
Size

27KB
MD5

44c2a2c2bbd741b08bfcc10b2630923c
SHA1

7e58c1444ec1ff27b30dd14ca6b7315442261fe7
SHA256

310b1260bfe180147e5283a21f96381c3e4eb204b122dcfd6f370d00185fbad9
SHA512

e1a595480f0c8cfcc42144ec89ab1c0537095c98fca803a1845a7f7b61ee97fda48270f14874a0765e778c0c40d665ea2ac0402e6c4987e21c59e06cca741317
SSDEEP

384:H9GryHnJktcBpIwKVuo0C7YfPNarnYCUdPh0pbiWI2Cv:H9EWJ+cH8j4NarnIdPh0pGWm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44c2a2c2bbd741b08bfcc10b2630923c_JaffaCakes118

Files

44c2a2c2bbd741b08bfcc10b2630923c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb55a93439d99ad5a567889078dc16b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetModuleFileNameA
OpenEventA
MultiByteToWideChar
lstrlenA
WinExec
SetFileAttributesA
GetFileAttributesW
GetProcAddress
ResetEvent
WaitForMultipleObjects
lstrcmpA
CreateToolhelp32Snapshot
Process32First
Process32Next
CompareStringA
lstrcpyA
FindResourceA
LoadResource
SizeofResource
CreateFileA
WaitForSingleObject
CloseHandle
DeleteFileA
ExitThread
TerminateThread
GetTickCount
WriteFileEx
WaitForSingleObjectEx
CreateProcessA
GetModuleHandleA
GetModuleHandleW
GetSystemDirectoryA
HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
GetCommandLineA
CreateEventA
SetEvent
GetLastError
CreateThread
Sleep

user32

PostQuitMessage
TranslateMessage
DispatchMessageA
PeekMessageA
MsgWaitForMultipleObjects
RegisterClassA
SetWindowTextA
DefWindowProcA
CreateWindowExW
DestroyWindow
MessageBoxA
LoadIconA
CreateWindowExA
FindWindowA
wsprintfW
wsprintfA
IsWindow
ShowWindow

advapi32

RegNotifyChangeKeyValue
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
RegSetValueExW
RegOpenKeyA
RegQueryValueExA
RegCloseKey

shell32

Shell_NotifyIconA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocString
SysFreeString

wininet

InternetGetConnectedState

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb55a93439d99ad5a567889078dc16b8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

wininet

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 9KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 9KB

.rsrc
Size: 10KB - Virtual size: 10KB