7919da3e54d75cc7a8f8c3095d30fb5f_JaffaCakes118

General

Target

7919da3e54d75cc7a8f8c3095d30fb5f_JaffaCakes118
Size

236KB
MD5

7919da3e54d75cc7a8f8c3095d30fb5f
SHA1

6e544452f76fa2ab7f6eaea9e8e3a5cc01fb20c9
SHA256

1fd94440e4c00a063dd7b94154e2ac239b9ded0e711cfbaf86dc4630b5f1ad13
SHA512

1c7d9c363f0baff562d8d50f1d6405d095090663ee5fde22115522ec8561330ef0eacbe026c5328c3b2b70afe2694857f705358c823e6b3f3500cf01a7a64954
SSDEEP

3072:IgLPvat6PGSbbBX68T0vs/LN8ZluN1/VDb8TshaiTs7BqhkzJFH:IkH3PGSbbBX68T0vs/quN59b89x7BhzH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7919da3e54d75cc7a8f8c3095d30fb5f_JaffaCakes118

Files

7919da3e54d75cc7a8f8c3095d30fb5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8bf1dd56dc37c02ac7622091ea75fa41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
GetCurrentProcess
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
GetCurrentThread
FreeLibrary
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
lstrlenA
SetThreadPriority
CreateProcessA
ResumeThread
CreateFileA
WriteFile
CloseHandle
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

wsprintfA

advapi32

RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

imagehlp

MakeSureDirectoryPathExists

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8bf1dd56dc37c02ac7622091ea75fa41

Headers

File Characteristics

Imports

kernel32

user32

advapi32

imagehlp

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 204KB - Virtual size: 202KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 204KB - Virtual size: 202KB

.rsrc
Size: 4KB - Virtual size: 16B