8277ecb943d6a0764914fafbea9cc715_JaffaCakes118

General

Target

8277ecb943d6a0764914fafbea9cc715_JaffaCakes118
Size

76KB
MD5

8277ecb943d6a0764914fafbea9cc715
SHA1

d24c33272b9818f88e484974346c99e956fe86e0
SHA256

75930502fc54dc2f5b7dc5324b7f3c90ece9051429d604530b98c0c4502697cf
SHA512

9ebefa3ff56d0a47ea54d7d868b82a878e9eac6b719ea94d05bc4bc628f11e598ebd8f894e562e2fac6492af354c85f655abb85d54f005f7db4e009c9523aae6
SSDEEP

1536:FAs7Xo6xcta5z5i5s0aySdWkX0bHDH8ph6Ht7r7QDk:WsTxya5wOLX0nH8ph6Ht7rv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8277ecb943d6a0764914fafbea9cc715_JaffaCakes118

Files

8277ecb943d6a0764914fafbea9cc715_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a91fc8d9082128ce07be3e0c703fe219

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DisconnectNamedPipe
CreateFileA
WriteFile
ConnectNamedPipe
GetFullPathNameA
Sleep
CreateThread
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
FreeResource
FlushFileBuffers
SetFilePointer
LockResource
LoadResource
FindResourceA
DeleteFileA
GetModuleHandleA
GetModuleFileNameA
GetCurrentProcess
GetSystemDirectoryA
UnmapViewOfFile
GetFileSize
ExitProcess
CreateMutexA
GetVersionExA
IsBadReadPtr
GetLastError
GetSystemInfo
LoadLibraryA
GetWindowsDirectoryA
GetProcAddress
SizeofResource
GetStartupInfoA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

winmm

mixerGetLineInfoA
mixerSetControlDetails
mixerOpen
mixerClose
mixerGetLineControlsA
mixerGetControlDetailsA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??3@YAXPAX@Z
sprintf
??2@YAPAXI@Z
__CxxFrameHandler
free
_except_handler3
calloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a91fc8d9082128ce07be3e0c703fe219

Headers

File Characteristics

Imports

kernel32

advapi32

winmm

msvcrt

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 52KB - Virtual size: 49KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 52KB - Virtual size: 49KB