89a599184f63042a25ebf0f6218cf28f_JaffaCakes118

General

Target

89a599184f63042a25ebf0f6218cf28f_JaffaCakes118
Size

97KB
MD5

89a599184f63042a25ebf0f6218cf28f
SHA1

a45472bfcd6da3bd09e7dd9f764c1f3977a04966
SHA256

229ae85c31771e8f19bb368615f25338e95af0ddb680f0138d570dc1aa154c1e
SHA512

b6245633fb25aed5078318505658b4343418576588a272ba501400069e555cb758ef510297bcf652f4fab55b62949b364c653b867585e9d6b183513e43ad761f
SSDEEP

3072:MXSlRSrInWBVMympU4bKAIo3KRQJz/37O:nRSrInWBVaU4b4+JjK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a599184f63042a25ebf0f6218cf28f_JaffaCakes118

Files

89a599184f63042a25ebf0f6218cf28f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f09412344d9ebe6bfe167bc8ae4b74a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetProcAddress
GetModuleHandleA
GetLastError
Sleep
ExitProcess
LoadLibraryA
FreeResource
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
GetCurrentDirectoryA
GetTempPathA
MoveFileA
SetFileTime
GetFileTime
GetCurrentProcessId
SleepEx
WaitForSingleObject
CreateEventA
GetCurrentProcess
GetShortPathNameA
ExpandEnvironmentStringsA
GetSystemDirectoryA
SetUnhandledExceptionFilter
GetCommandLineA
GetCurrentThreadId
IsBadReadPtr
CreateDirectoryA
GetFileAttributesA
DeleteFileA
SetFileAttributesA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

shell32

ShellExecuteA

msvcrt

memmove
??2@YAPAXI@Z
srand
__CxxFrameHandler
_ftol
tolower
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strlwr
_strnicmp
_except_handler3
rand
memset
strncat
_itoa

ws2_32

closesocket
getprotobynumber

Sections

text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f09412344d9ebe6bfe167bc8ae4b74a

Headers

File Characteristics

Imports

kernel32

shell32

msvcrt

ws2_32

Sections

text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 165KB

.rsrc Size: 4KB - Virtual size: 3KB

text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 165KB

.rsrc
Size: 4KB - Virtual size: 3KB