4c41deee6280616832931b1ff0f2dbe4_JaffaCakes118

General

Target

4c41deee6280616832931b1ff0f2dbe4_JaffaCakes118
Size

100KB
MD5

4c41deee6280616832931b1ff0f2dbe4
SHA1

596f024d342846de3c589dd265c935976fd3542f
SHA256

80ff74b09e77ad769e0b7221688d7c53e6e25f7123a007d21bcd0debe7527dc4
SHA512

4819856471b51c7f72565de804d45503bb51d4d503546f051c225e87d3c1303058f775045b037818f094dacd2deaeb8c3b8b1fb9f12c39dded59f55ef0d587e8
SSDEEP

3072:qwxCHv/6y5RKqxMbiwaqut32xvIo1TxQD:qwgPSyyZbjk0xvTg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c41deee6280616832931b1ff0f2dbe4_JaffaCakes118

Files

4c41deee6280616832931b1ff0f2dbe4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a4d034e7418ae8b25b6f9177a441e98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
GetWindowsDirectoryA
FreeResource
WriteFile
GetTickCount
GetTempPathA
LockResource
LoadResource
SizeofResource
FindResourceA
MoveFileExA
SetFilePointer
CreateFileA
CloseHandle
ReleaseMutex
GetLastError
CreateMutexA
GetModuleFileNameA
GetCurrentThreadId
GetModuleHandleA
GetFileAttributesA
GetStartupInfoA
DeleteFileA
GetSystemDirectoryA
ReadFile
CreateProcessA

user32

GetInputState
GetMessageA
wsprintfA
PostThreadMessageA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

msvcrt

__setusermatherr
_controlfp
strstr
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a4d034e7418ae8b25b6f9177a441e98

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 236B

.rsrc Size: 95KB - Virtual size: 96KB

.code Size: 512B - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 236B

.rsrc
Size: 95KB - Virtual size: 96KB

.code
Size: 512B - Virtual size: 4KB