a1d0f8895052b60c4d2860556494f233_JaffaCakes118

General

Target

a1d0f8895052b60c4d2860556494f233_JaffaCakes118
Size

76KB
MD5

a1d0f8895052b60c4d2860556494f233
SHA1

b7bc146e9a2bbad4a2fa3e0fb41ecd6a22f66d36
SHA256

5d731406a57beb742a69105397a9db85f5cfccf38a2cb939e45d0e0309281d5b
SHA512

2855a4c400c74da2f3c84f3f4ab5ca15098fca171a390edaab0003e9847321c72cc0b9b191b83f765035235a11fffc04ad68e2c0ca24d21e05ab82bcce1887e3
SSDEEP

768:yUyGoHR1M2xRR7s3QGHOrh+1IAoTvRD/PsCga3HpvAfu/QZp92QJbeGVF:O9xRFAzHoCpoNDPga5vVST2QJbe6F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1d0f8895052b60c4d2860556494f233_JaffaCakes118

Files

a1d0f8895052b60c4d2860556494f233_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31d9a64301a19b489cf64183ba7da840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualProtect
VirtualAlloc
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
OpenMutexA
ExitProcess
CreateMutexA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
RtlUnwind
WriteFile
SetFilePointer
HeapAlloc
HeapReAlloc
GetStringTypeW

user32

BeginPaint
EndPaint
PostMessageA
MessageBoxA
DefWindowProcA
RegisterClassA
CreateWindowExA
ShowWindow
SetWindowPos
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31d9a64301a19b489cf64183ba7da840

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 22KB - Virtual size: 22KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 24KB - Virtual size: 24KB