6f26aa2ca3ce502d616eccb95bd14e7c_JaffaCakes118

General

Target

6f26aa2ca3ce502d616eccb95bd14e7c_JaffaCakes118
Size

56KB
MD5

6f26aa2ca3ce502d616eccb95bd14e7c
SHA1

037545a0a84c08706b338c536f94644e3d345a13
SHA256

8b2a279f61b47c8835e324d35a47e6bfd51473de7077295c7a28b350c12bb9d5
SHA512

bb28be03e2616fbbf45889527d19317bf1dc96e050033cd01b6c90f327072be03c94c45d4fc09ba6c428f2badfd22a0fafa8bfea4256d15f74b3630c036e274e
SSDEEP

768:H4VSs/HNtiw9lMgBRb2Z9Wd6CSdnRvOIX1t9Kj:Yzewgcb2Z9IguIFt9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f26aa2ca3ce502d616eccb95bd14e7c_JaffaCakes118

Files

6f26aa2ca3ce502d616eccb95bd14e7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f1c0e770908d86a47c294366ffd0361

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CopyFileA
DeleteFileA
lstrcpyA
lstrcatA
GetSystemDirectoryA
GetLastError
CreateEventA
SuspendThread
CloseHandle
CreateMutexA
FreeLibrary
GetProcAddress
ExitProcess
lstrlenA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
LCMapStringA
SetEndOfFile
CreateThread
LoadLibraryA
GetModuleFileNameA
CreateDirectoryA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
ReadFile
GetCPInfo
GetACP
GetOEMCP
LCMapStringW

user32

GetParent
GetCursorPos

advapi32

RegCloseKey
RegSetValueA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f1c0e770908d86a47c294366ffd0361

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 632B

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 632B