a40b3161b486db13b7ecb07f861ad47f_JaffaCakes118

General

Target

a40b3161b486db13b7ecb07f861ad47f_JaffaCakes118
Size

66KB
MD5

a40b3161b486db13b7ecb07f861ad47f
SHA1

fa4a4d5981a6b74beee8e7657b36b4cefbc8ebd8
SHA256

f356423e09bf29ce4279aeabec9043cb4ff89161b2bee578756e6cb862449942
SHA512

699478f74c0c944b9cf44610548db266b4f02c60cd3eb0db645fcaab7be96373979d2ada4cae092b5e3fa68cded4e8d7616bbf7a4846e65b9fb5b3090cd6c02e
SSDEEP

768:XehEyHPtWjqh2jC6xEgK+/cF/NMqRRGiBjhoip/FfRQK6tG+cG0n72s:4EyHsjqh2jC6xk+/cF/N3zoiZFJmNs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a40b3161b486db13b7ecb07f861ad47f_JaffaCakes118

Files

a40b3161b486db13b7ecb07f861ad47f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8d58dc1eaf490b059f79f063776e1f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
FreeLibrary
LoadLibraryA
GetProcAddress
SetFileAttributesA
GetModuleFileNameA
GetLastError
CloseHandle
ReleaseMutex
OpenMutexA
WinExec
GetTempPathA
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
GetModuleHandleW
GetModuleFileNameW
Sleep
CreateProcessW
OpenProcess
GetCurrentProcessId
WaitForSingleObject
ExitProcess
CreateMutexA
lstrlenA
CopyFileA
GetSystemDirectoryA
GlobalMemoryStatusEx
lstrcpyA
GetComputerNameA
GetLocaleInfoW
LCMapStringW
LCMapStringA
FlushFileBuffers
SetFilePointer
GetOEMCP
GetThreadContext
GetTickCount
LocalAlloc
InterlockedExchange
RaiseException
lstrcatA
ExitThread
TerminateProcess
CreateProcessA
RtlUnwind
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
SetStdHandle

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

comctl32

ord17

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8d58dc1eaf490b059f79f063776e1f9

Headers

File Characteristics

Imports

kernel32

wininet

comctl32

Sections

.text Size: 65KB - Virtual size: 64KB

.rsrc Size: 512B - Virtual size: 160B

.text
Size: 65KB - Virtual size: 64KB

.rsrc
Size: 512B - Virtual size: 160B