8b7744d24863362747f58705cfbe197f_JaffaCakes118

General

Target

8b7744d24863362747f58705cfbe197f_JaffaCakes118
Size

24KB
MD5

8b7744d24863362747f58705cfbe197f
SHA1

cba25e7b1fc0fd7029d86757dd013f0cedccb207
SHA256

40d43daa97c103f0dea316df29accf8876fc26faeee7f83829ab7870d3c4104e
SHA512

73be906cf213fe23f766b8d48f7160f90108a2b429df44982ecb77d98accbaefc60b56d573b5b16bfb6d61e3c17694618066c980501e74e172bcf2bdfbbf5776
SSDEEP

384:Lzx4vnWZPR11BnZ9X+2AMBVsTqMpdA19hlSKdJ4U/h/hy6Pk:LzxgnWZPR11BnZ8qVYpy5SKfx/h/c6Pk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b7744d24863362747f58705cfbe197f_JaffaCakes118

Files

8b7744d24863362747f58705cfbe197f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db6d6845d04e6c29a0ca9f82089026cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetModuleFileNameA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualFree
UnmapViewOfFile
VirtualAlloc
CloseHandle
MapViewOfFileEx
CreateFileMappingA
OpenFileMappingA
VirtualProtect
MapViewOfFile
CreateFileA
SearchPathA
GetVersionExA
WriteProcessMemory
OpenProcess
EnterCriticalSection
lstrcpynA
lstrcpyA
Sleep
LocalAlloc
FreeLibrary
_lclose
SetFileTime
SystemTimeToFileTime
GetSystemTime
OpenFile
GetCurrentProcess
CreateProcessA
CopyFileA
GetFileAttributesA
GetFullPathNameA
lstrcatA
GetSystemDirectoryA
GetLastError
DeleteFileA
GetCommandLineA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
HeapFree
GetProcessHeap
HeapAlloc
LocalFree
GetCurrentProcessId
GetComputerNameA

user32

DefWindowProcA
RegisterClassA
MessageBoxA
wsprintfA

advapi32

RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegConnectRegistryA
RegCloseKey
RegOpenKeyA
GetUserNameA
RegSetValueExA
RegCreateKeyA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

db6d6845d04e6c29a0ca9f82089026cb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 4KB