5c7ba3e0fcf0f01253597dbc712d486c_JaffaCakes118

General

Target

5c7ba3e0fcf0f01253597dbc712d486c_JaffaCakes118
Size

52KB
MD5

5c7ba3e0fcf0f01253597dbc712d486c
SHA1

771cd7627a9f1d3e4bb062093bd67b9cd8ab8ed8
SHA256

4caff628e4dd5c34fb5ba78f5fe22e1c5f6520c64fd2d8fdc569c59862650e25
SHA512

60aa904abbacb8b8673b47debe5ef6cd2a1c4f6fea4477b1462d82a08e19f4f0d40464f87345a6fc695594873ac65e0f36e1f8ac0af9f3cd97ef290a5eca8d8f
SSDEEP

768:n3EA/uWAOUG3iW+IYxVan9dEftEOG7j1vsGtWAoG6oGw:3T/0xe9S1Ato/oGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c7ba3e0fcf0f01253597dbc712d486c_JaffaCakes118

Files

5c7ba3e0fcf0f01253597dbc712d486c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ca50600f90df85129a6c78ccb261319

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
CreateThread
Process32Next
Process32First
CreateToolhelp32Snapshot
ReadProcessMemory
OpenProcess
CloseHandle
TerminateProcess
SetFileAttributesA
Module32First
GetLastError
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
Sleep
DeleteFileA
GetTickCount
ExitProcess
Module32Next
GetLocaleInfoA
LCMapStringW
LCMapStringA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetFilePointer
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
GetUserNameA
RegDeleteValueA

ws2_32

WSACleanup
closesocket

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4ca50600f90df85129a6c78ccb261319

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 17KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 17KB