a1821a43977f2569f02f175f7d604ef7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a1821a43977f2569f02f175f7d604ef7_JaffaCakes118
Size

188KB
MD5

a1821a43977f2569f02f175f7d604ef7
SHA1

650bd2c50d65b0307b328144e77f5cc70895c167
SHA256

5cdad61507e4abba0853910785d7afb7cadee2c28bb2b53953ab7f3050969007
SHA512

29375bd33a66386ba1833149606fcd1acc798d0c8a2b94782a8c29916b5cc6a1f62e7243e6f6d5b1fc7bac78e24729a78b10e5395c9b7cfe07b5a6bf40e1771f
SSDEEP

3072:Igoso/zzaQlWWVlJ0Ei/pYV+U8+ZDrIiyboUKwRZEyAb+F+jnAj8kD51aqaFcoiR:IZTbzaQlWWV08rvr/Isb+8nUjAtxiiil

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1821a43977f2569f02f175f7d604ef7_JaffaCakes118

Files

a1821a43977f2569f02f175f7d604ef7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92bcdc5fd601855a575269497be4fc83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

sfc

SfcIsFileProtected

msvcrt

_itoa
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
tolower
toupper
malloc
free
strstr
strncpy
_CxxThrowException
__CxxFrameHandler
strcmp
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
_ftol
srand
rand
strlen
memset
strcpy
strchr
strncat
strcat
_except_handler3
_stricmp
_strlwr
_strnicmp

kernel32

GetTempPathA
GetStartupInfoA
LoadLibraryA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
CreateToolhelp32Snapshot
Process32First
GetCurrentProcessId
Process32Next
SetFileAttributesA
DeleteFileA
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
SetUnhandledExceptionFilter
OpenEventA
ExpandEnvironmentStringsA
GetShortPathNameA
GetFileAttributesA
CreateEventA
WaitForSingleObject
Sleep
GetModuleFileNameA
lstrcmpiA
GetSystemDirectoryA
GetTickCount
FindFirstFileA
FindNextFileA
CreateFileA
WriteFile
SetFilePointer
GetFileTime
SetFileTime
CloseHandle
MoveFileA
GetWindowsDirectoryA
lstrcpyA
HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
lstrcatA
ExitProcess
CreateDirectoryA
lstrlenA
SetEnvironmentVariableA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

user32

CharNextA
wsprintfA

shlwapi

SHDeleteKeyA

netapi32

NetApiBufferFree
NetUserGetLocalGroups

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92bcdc5fd601855a575269497be4fc83

Headers

File Characteristics

Imports

sfc

msvcrt

kernel32

version

user32

shlwapi

netapi32

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 160KB - Virtual size: 162KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 160KB - Virtual size: 162KB

.rsrc
Size: 4KB - Virtual size: 1KB