8daf76b8f27eda2d41ac5d2d1e6a870b_JaffaCakes118

General

Target

8daf76b8f27eda2d41ac5d2d1e6a870b_JaffaCakes118
Size

48KB
MD5

8daf76b8f27eda2d41ac5d2d1e6a870b
SHA1

d4d76a625ff758f18b28eb52af8752cbe13b6fb1
SHA256

84adb9baed0c68dcaad933f5f05f9346c1e438970e145fa5ed463a70f140d155
SHA512

87a3eba3662a34ad8caa6c79c9c4137c616f02294c8d68d59de621036069a2ea2596401821eb13b8fdf0df2c74c28e68085d607a8aa2f8b9c00bb4f515c0b5f5
SSDEEP

384:2wJU8o1bSiZ3tj7C26sJHBi06C63w0/2yRXhqxrxJucYgGW/g20NZRL4enAXPG:298o1bSytj+KBQf/20h09JJYgn/bSDOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8daf76b8f27eda2d41ac5d2d1e6a870b_JaffaCakes118

Files

8daf76b8f27eda2d41ac5d2d1e6a870b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

763559f7b237017efc45ce6da4103f1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetFileAttributesA
GetProcAddress
FormatMessageA
SearchPathA
GetPrivateProfileStringA
VirtualAlloc
GetUserDefaultLCID
GetStringTypeA
LCMapStringW
ExpandEnvironmentStringsA
LoadLibraryExA
VirtualFree
GetLastError
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
GetStringTypeW

user32

MessageBoxA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Exports

Exports

LVRTTable

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

763559f7b237017efc45ce6da4103f1f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

version

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 12KB - Virtual size: 9KB