a1dd20c1e9182c26db1dfd82837a5b96_JaffaCakes118

General

Target

a1dd20c1e9182c26db1dfd82837a5b96_JaffaCakes118
Size

82KB
MD5

a1dd20c1e9182c26db1dfd82837a5b96
SHA1

7fec3ccc40a58f8ab340a7a9aa4c40a325c61847
SHA256

7a8fe27d89ce16b5bf41ee48b34d7d33125d01313d30de1ae801284d9c43fbe3
SHA512

36bf4df95cf1e5ce1b8b65a38028142bebb550d0a5157da1d926da5b3f6cf9ef9600b0bf8b7559a5f3a412e0bbf0056c9a0c04be151361e3723a1a8c735bea38
SSDEEP

768:vqnZbOV/7w+LBeLr9zNIgLa14SrNYdNn7:CMVM+9elNJLaPA7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1dd20c1e9182c26db1dfd82837a5b96_JaffaCakes118

Files

a1dd20c1e9182c26db1dfd82837a5b96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a8df78acd1fde4b51d221cf8ee96919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
GetFileAttributesA
CreateDirectoryA
lstrlenA
ReadFile
GetVersionExA
Process32Next
Process32First
CreateToolhelp32Snapshot
ExitThread
DeleteFileA
TerminateThread
WaitForMultipleObjects
GetModuleFileNameA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
Sleep
VirtualFree
SetFilePointer
CloseHandle
LoadLibraryA
GetWindowsDirectoryA
GetProcAddress
ResetEvent
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
CompareStringA
CreateEventA
SetEvent
CreateThread
WaitForSingleObject
CreateProcessA
SizeofResource
LoadResource
FindResourceA
lstrcpyA
lstrcmpA
GetSystemDirectoryA

user32

wsprintfA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegNotifyChangeKeyValue
RegOpenKeyA
RegEnumKeyA
RegCloseKey

wininet

InternetGetConnectedState

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a8df78acd1fde4b51d221cf8ee96919

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

iphlpapi

Sections

.text Size: 74KB - Virtual size: 73KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 456B

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 74KB - Virtual size: 73KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 456B

.rsrc
Size: 10KB - Virtual size: 9KB