5accd3a7c322537b7a57fcf15e4cc2a8_JaffaCakes118

General

Target

5accd3a7c322537b7a57fcf15e4cc2a8_JaffaCakes118
Size

452KB
MD5

5accd3a7c322537b7a57fcf15e4cc2a8
SHA1

386743139a3ae27df71c934c51781e7fea3a51e4
SHA256

ca989596193726a477f293e39c0004812e90d6d82cce643085115bad1a4435fe
SHA512

0a27a5f9377dd41372b5d240b329c7f5811f85a94ac0d9ded2e3d9f5df99fe2ba0a62a6c49e65505aa3f88bf40b75642592b0210a513944e60e686ca8fa46bfc
SSDEEP

6144:nstCLTmDlTWHwUHZUKVJN3BgcKNf4Y7Uf5za+h8R1F:nstCLTmDYQOUCJLtKNAY7S5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5accd3a7c322537b7a57fcf15e4cc2a8_JaffaCakes118

Files

5accd3a7c322537b7a57fcf15e4cc2a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99947be3ef2cf45646de98250222a038

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
FindResourceA
SizeofResource
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
WriteFile
CloseHandle
GetCurrentProcess
GetFileAttributesA
GetStringTypeA
LCMapStringW
ExitProcess
TerminateProcess
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
GetLastError
ReadFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
SetFilePointer
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
MultiByteToWideChar
LCMapStringA
GetStringTypeW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenProcessToken

userenv

GetUserProfileDirectoryA

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 416KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99947be3ef2cf45646de98250222a038

Headers

File Characteristics

Imports

kernel32

advapi32

userenv

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 23KB

.rsrc Size: 416KB - Virtual size: 414KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 23KB

.rsrc
Size: 416KB - Virtual size: 414KB