94b607b60bc15db415b3ff40d0766b80_JaffaCakes118

General

Target

94b607b60bc15db415b3ff40d0766b80_JaffaCakes118
Size

48KB
MD5

94b607b60bc15db415b3ff40d0766b80
SHA1

668259f11d3404f44d85cdb9d2a0fbd626ab108b
SHA256

964752c328704038330dc4dda2e4a50bf063756a04967f304336041fda72af39
SHA512

2dbc2492b4b66ddf726f24c45b753ca057e842240b1554e85273c7dd8c2ae5a0ff72a45e0244fcf7d2cc501a1f58ab0630148c87346ffe93f04256c0d24fb09d
SSDEEP

768:OFc0PKISF9CvddNgS+22bENvkxb4+mtTl7hx:gLK8N+d4G6l7hx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94b607b60bc15db415b3ff40d0766b80_JaffaCakes118

Files

94b607b60bc15db415b3ff40d0766b80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46fbddcc9ce565fbf7b721cd12a8b321

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetVersionExA
ExitProcess
CloseHandle
TerminateProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetCurrentDirectoryA
FreeResource
SizeofResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetCurrentThreadId
Sleep
MoveFileA
DeleteFileA
GetLastError
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
GetSystemInfo
FindResourceA
lstrcmpiA
SetUnhandledExceptionFilter
IsBadWritePtr
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
HeapAlloc
VirtualAlloc
HeapReAlloc

user32

FindWindowA
PostMessageA
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationA
SetProcessWindowStation
OpenDesktopA
SetThreadDesktop
CloseWindowStation
CloseDesktop
wsprintfA
GetSystemMetrics

advapi32

RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46fbddcc9ce565fbf7b721cd12a8b321

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 32KB - Virtual size: 28KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 32KB - Virtual size: 28KB