4769fcaa018e2f69e5cc83e694fdded6_JaffaCakes118

General

Target

4769fcaa018e2f69e5cc83e694fdded6_JaffaCakes118
Size

102KB
MD5

4769fcaa018e2f69e5cc83e694fdded6
SHA1

b31a9e42faf17ec92ed58cd223ffe165d1af3b54
SHA256

055aba5c3648964253ad404c4f9cfe118fb628cd31562026ece0de8fabe21dfb
SHA512

b084327b14ab6912c6853e6cb5c70a405c3a06600912da95848e06dd1a466048706469f6b9b14a89e47e67f475bd70b6c6c459a3cf44f5b3102748724735652b
SSDEEP

1536:INK6bARHS2doEpguz0DJvLI6ODzlmO4rvb1uo8v6uIbu3vVNjzFNsqQjczB0Yaw:Yyn4e0DJvLhMhmZAb7V3DFlrp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4769fcaa018e2f69e5cc83e694fdded6_JaffaCakes118

Files

4769fcaa018e2f69e5cc83e694fdded6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4861ec1315cd005040ddeea96050e05e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegSetValueExA

comctl32

InitCommonControls

kernel32

CloseHandle
CreateSemaphoreA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempFileNameA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
LoadLibraryA
MoveFileExA
RemoveDirectoryA
SetCurrentDirectoryA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__set_app_type
_cexit
_fileno
_fmode
_fpreset
_iob
_mkdir
_rmdir
_setmode
atexit
fclose
fgets
fgetws
fopen
rand
signal
sprintf
srand
strchr
strcpy
time
wcscat
wcscpy
wcslen
wcsncmp

user32

ExitWindowsEx
MessageBoxW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ldata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4861ec1315cd005040ddeea96050e05e

Headers

File Characteristics

Imports

advapi32

comctl32

kernel32

msvcrt

user32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 40B

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 896B

.ldata Size: 76KB - Virtual size: 76KB

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 40B

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 896B

.ldata
Size: 76KB - Virtual size: 76KB