8741519f1d028739a9673653db146cd1_JaffaCakes118

General

Target

8741519f1d028739a9673653db146cd1_JaffaCakes118
Size

32KB
MD5

8741519f1d028739a9673653db146cd1
SHA1

3753b9da1903bf811be774ff693036d78efacde5
SHA256

db7c3edd18800f2a7f5c165ead87eae79b89fb053874fb4ad6b723f2395bb575
SHA512

ccd30fbb23082fe9997e941a5909ba1f3e8d25101d5826452c2ec5443c4e4ce836b1116700d005c1e84da7b705bf6f120bb3be585b252f5bd7d43bb85df8216a
SSDEEP

384:wdjqomcrLhkdou9wdKZLRMeA/2aDaC4mvWfX46avBZW6PhQNvBs:ik2dKHA/LJp2UZZW6PhYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8741519f1d028739a9673653db146cd1_JaffaCakes118

Files

8741519f1d028739a9673653db146cd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2535378669007eb3f4063922e56ce490

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CloseHandle
WriteFile
ResumeThread
lstrcpyA
GetShortPathNameA
CreateFileA
GetModuleHandleA
GetStartupInfoA
DeleteFileA
GetCommandLineA
GetSystemDirectoryA
GetModuleFileNameA
CopyFileA
lstrlenA
SleepEx
LocalFree
CreateProcessA

advapi32

RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA

mfc42

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
_findfirst
_mbsrchr
_mbsicmp
free
malloc
fopen
fputs
fclose
memcmp
strncpy
exit
memset
_except_handler3
??1type_info@@UAE@XZ
_purecall
_EH_prolog
__CxxFrameHandler
strcpy
strlen
strstr
sprintf
_setmbcp
_CxxThrowException

ole32

CoCreateInstance
OleRun
CoInitialize

oleaut32

user32

wsprintfA
ShowOwnedPopups
EnableWindow
SetParent

Sections

Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2535378669007eb3f4063922e56ce490

Headers

File Characteristics

Imports

kernel32

advapi32

mfc42

msvcrt

ole32

oleaut32

user32

Sections

Size: 28KB - Virtual size: 28KB

.rsrc Size: 512B - Virtual size: 4KB

.avp Size: 2KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.avp
Size: 2KB - Virtual size: 4KB