972bc1ec0556160ad9d1eacd0fcc9b70_JaffaCakes118

General

Target

972bc1ec0556160ad9d1eacd0fcc9b70_JaffaCakes118
Size

26KB
MD5

972bc1ec0556160ad9d1eacd0fcc9b70
SHA1

f92c8d8fa1d6ffdcd5eb0900cd99f28b513032f0
SHA256

37aeaf728daaeef883fd47cc616c9232e9df22abe68476ca483701ce9bc150fd
SHA512

ddc863b26264db649dc1a3976a85a8f399321bbb070d3294097bcfa1b02698292aa030e3fd99feab9b765a30ef3c4b11fcb8ee3cfadee1a34ef5d7f0f9216438
SSDEEP

384:JKtkth9XbnHIkKBcnw1W2RrbLHr8hBeD6uIJ4FdQadlZpU+7f5UXf5D:ykpqcKW2RrbPIMK4r57UPJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
972bc1ec0556160ad9d1eacd0fcc9b70_JaffaCakes118

Files

972bc1ec0556160ad9d1eacd0fcc9b70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

471bde0a80d7ef3097273abf289c0419

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
TerminateProcess
GetCurrentProcess
Sleep
WriteFile
GetShortPathNameA
GetEnvironmentVariableA
GetModuleFileNameA
GetLastError
GetModuleHandleA
FreeResource
SizeofResource
LockResource
LoadResource
GetSystemDirectoryA
SetFilePointer
FlushFileBuffers
GetTempFileNameA
GetTempPathA
ReadFile
GetWindowsDirectoryA
DeleteFileA
GlobalAlloc
GlobalFree
GetFileSize
SetEndOfFile
FindResourceA
GetStartupInfoA
LoadLibraryA

user32

wsprintfA

msvcrt

_except_handler3
strlen
strcat
strcpy
memcpy
memset
free
malloc
strrchr
_stricmp
fclose
fopen
strcmp
__CxxFrameHandler
strncpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

shell32

ShellExecuteA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

471bde0a80d7ef3097273abf289c0419

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

advapi32

shell32

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 808B

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 808B

.rsrc
Size: 15KB - Virtual size: 15KB