4b17bbadb70ea3a49a2bc7b1c3547d0b_JaffaCakes118

General

Target

4b17bbadb70ea3a49a2bc7b1c3547d0b_JaffaCakes118
Size

1.2MB
MD5

4b17bbadb70ea3a49a2bc7b1c3547d0b
SHA1

711d49292fb075d695557e03bbb556bf83866c62
SHA256

6f91a31d49c70c8c1a1e5d88e98725e497c11e42fe7060285416e353c29b1da5
SHA512

84923ba58a4b67766784243db6f5aaa073064581c2ec56cee710ce5bca9d52adafe4ddea221c3507dc4e35ab59e7c50b0928d7b78ac4482151927b7847d15eac
SSDEEP

24576:cVD2TJT+wnhsPpnYWz1S4SsiSVo0GMrXGPAuD72tep:c12J1Pg1SpSC8rLtA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b17bbadb70ea3a49a2bc7b1c3547d0b_JaffaCakes118

Files

4b17bbadb70ea3a49a2bc7b1c3547d0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78edf21f658dec92426ece2d04e0ddfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
Sleep
DeleteFileA
GetModuleFileNameA
CloseHandle
WriteFile
CreateDirectoryA
CreateFileA
LoadResource
SizeofResource
FindResourceA
GetTempFileNameA
GetTempPathA
GetLastError
MultiByteToWideChar
FindFirstFileA
LockResource
FindClose
RaiseException
LCMapStringW
LCMapStringA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
ReadFile
GetProcAddress
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
SetEndOfFile

advapi32

RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderLocation
SHChangeNotify
SHGetPathFromIDListA

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78edf21f658dec92426ece2d04e0ddfc

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 17KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 17KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB