457b4b0cb05ec9aea304fc8a266d60c0_JaffaCakes118

General

Target

457b4b0cb05ec9aea304fc8a266d60c0_JaffaCakes118
Size

76KB
MD5

457b4b0cb05ec9aea304fc8a266d60c0
SHA1

41b791d498f4b7c58d102a5b3e3dd94010292dcf
SHA256

ac1b350c862ff6b2bae72e1006b27d1d3d1a831613ab414d43b8729477f40d8e
SHA512

09c615f5b0c728e083013b822ff33b05bcca1e59fd068b4d1bc876580c9b0c7b312915c1f9f64dce2f65fe564618c9bf506c2e671a958b1fcadf9ce5a5255f44
SSDEEP

768:VQL7MwsFCDbSRO1jdotvXHmbd4UgYTtPNQZkSqGoXbarUT1/hoLR:mPMw8CXqYotPGbd3tQbRmWEpoLR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
457b4b0cb05ec9aea304fc8a266d60c0_JaffaCakes118

Files

457b4b0cb05ec9aea304fc8a266d60c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

025e0ec17eb2a3ffe49687705616bca9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
OpenProcess
_lclose
_lwrite
GetLastError
_lcreat
DeleteFileA
GetCurrentProcess
VirtualFreeEx
CopyFileA
GetExitCodeThread
WaitForSingleObject
Sleep
CreateRemoteThread
GetProcAddress
WriteProcessMemory
VirtualAllocEx
GetModuleHandleA
GetModuleFileNameA
GetSystemDirectoryA
CloseHandle
OpenFile
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeW

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

shell32

ShellExecuteA

psapi

GetModuleBaseNameA
EnumProcesses

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

025e0ec17eb2a3ffe49687705616bca9

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

psapi

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 52KB - Virtual size: 50KB

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 52KB - Virtual size: 50KB