774844eb81e6d7c27db7df3e743e240a_JaffaCakes118

General

Target

774844eb81e6d7c27db7df3e743e240a_JaffaCakes118
Size

163KB
MD5

774844eb81e6d7c27db7df3e743e240a
SHA1

df74f5c59a48a2f36cef24fb31e8c0f4eb9d4895
SHA256

149a9c26bdbcee431a1250f3cb6b8490739ee48da15b131103e89a9025f07e1c
SHA512

99a74e1c079fea270d72d5666c6f7d74bea64c15f5cde5e5f785316293152915ab87d67d55e7ad00243a8d0f5c4b36a3aacf3133df0542d21fab7404aa9f1473
SSDEEP

3072:sgFn8R7HlrqtHtoPdqGg/xxaqtigcSpKBrwdKJiDZeti2sMRSynY:e7FrM+qlt7cBrlJcZQiws

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
774844eb81e6d7c27db7df3e743e240a_JaffaCakes118

Files

774844eb81e6d7c27db7df3e743e240a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5640ebddc6fb3d252f89c7ec15fae66b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
CloseHandle
GetExitCodeProcess
WaitForSingleObject
Sleep
CopyFileA
GetVersion
GetTempFileNameA
GetTempPathA
RaiseException
LCMapStringW
LCMapStringA
FormatMessageA
GetModuleFileNameA
GetEnvironmentVariableA
GetShortPathNameA
CreateProcessA
GetCurrentProcess
SetPriorityClass
SetFileAttributesA
ResumeThread
DeleteFileA
GetLastError
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
HeapAlloc
GetProcAddress
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
SetFilePointer
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
FlushFileBuffers

user32

MessageBoxA
LoadStringA

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

shell32

SHGetPathFromIDListA
SHChangeNotify
SHGetSpecialFolderLocation

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5640ebddc6fb3d252f89c7ec15fae66b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 92KB - Virtual size: 92KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 92KB - Virtual size: 92KB