661831e815aed76bf0d309d8c374c42a_JaffaCakes118

General

Target

661831e815aed76bf0d309d8c374c42a_JaffaCakes118
Size

124KB
MD5

661831e815aed76bf0d309d8c374c42a
SHA1

19b1cd9a306c18da6cd0e67aa7d22de91c0220b2
SHA256

944d1bb4e0a94ee2f6c611c9e77a4def45e98d31d2be9b6940a9d1265d276d5f
SHA512

3d846c0b827c1bebe37b2352c39708f2c8a5c667450646fcb5be58363a8524b6bf6ea5c71abe79486c2aa47b96b694c6169ca346c6ab975a7bc11cc4e5271ce4
SSDEEP

3072:cPmwWHs7Oq932poZR1sIfH/zDKTPVMjT1lZ:cPmwgs9N2gH/zGTPalZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661831e815aed76bf0d309d8c374c42a_JaffaCakes118

Files

661831e815aed76bf0d309d8c374c42a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0bebf286a1287963da14d7eef5a608cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
ExitProcess
GetModuleHandleA
CloseHandle
lstrcmpiA
GetCurrentProcess
DeleteFileA
MoveFileA
WriteFile
lstrlenA
SetFilePointer
lstrcatA
lstrcpyA
SetLastError
GetLastError
Sleep
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateDirectoryA
SetUnhandledExceptionFilter
GetCommandLineA
CreateMutexA
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA

user32

wsprintfA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
LoadIconA

shell32

ShellExecuteA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
memset
??2@YAPAXI@Z
memcpy
strtok
__CxxFrameHandler
_except_handler3
strlen
??3@YAXPAX@Z
rand
malloc
atoi
strchr
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1100
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bebf286a1287963da14d7eef5a608cb

Headers

File Characteristics

Imports

kernel32

user32

shell32

msvcrt

Sections

.rdata Size: 3KB - Virtual size: 2KB

.1100 Size: 10KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 872B

.rdata
Size: 3KB - Virtual size: 2KB

.1100
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 872B