4501968ad58750bb56eab679be9b4f7c_JaffaCakes118

General

Target

4501968ad58750bb56eab679be9b4f7c_JaffaCakes118
Size

18KB
MD5

4501968ad58750bb56eab679be9b4f7c
SHA1

4d3cae112a0ffa40b401450f31ecd16ebac491e1
SHA256

aaa7ed4aa406e72c093f73fabda35bbc6a5e56fbed0f2bfb5decff7eedf38c0f
SHA512

a7449b3a45e9645c0a56d32bf13f570a0574c1f0f92b6ebf6ef799cce7762cf1868487d171c163837f8c5de926769e0578bf28a07ae05a043697d7b38faadb1d
SSDEEP

384:0Fc92/j14DgqtZXeBg+lOlw4ZREoxHQPDXnEFft:IcKaDLOeQPYht

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4501968ad58750bb56eab679be9b4f7c_JaffaCakes118

Files

4501968ad58750bb56eab679be9b4f7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd2a3ba656d19ad2d48d2a94733ac5f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

kernel32

GetLogicalDrives
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalMemoryStatus
LoadLibraryA
GetDriveTypeA
LocalFree
MultiByteToWideChar
ReadFile
SetFilePointer
Sleep
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
GetDiskFreeSpaceA
FreeLibrary
FindNextFileA
FindFirstFileA
FindClose
ExitProcess
CreateFileA
CopyFileA
CloseHandle
LocalAlloc
lstrlenA

wsock32

gethostbyname
gethostname

advapi32

RegSetValueExA
IsValidSid
GetUserNameA
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
RegCloseKey
RegCreateKeyA
RegEnumKeyExA
RegQueryValueExA
LookupAccountNameA

shell32

ShellExecuteA
SHGetSpecialFolderPathA

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

rasapi32

RasEnumEntriesA
RasGetEntryDialParamsA
RasGetEntryPropertiesA

oleaut32

SysAllocString
SysFreeString
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayAccessData

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fd2a3ba656d19ad2d48d2a94733ac5f2

Headers

File Characteristics

Imports

user32

kernel32

wsock32

advapi32

shell32

ole32

rasapi32

oleaut32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 132KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 132KB