a7222aa2f84e311162949c0122f03865_JaffaCakes118

General

Target

a7222aa2f84e311162949c0122f03865_JaffaCakes118
Size

67KB
MD5

a7222aa2f84e311162949c0122f03865
SHA1

74cadf8f0e817f736ede05a60ea936e91fdcd8cd
SHA256

ff11e5483c20720ecd11c20037a39d945cee966f2a17f9d948d815de2ad289fb
SHA512

3d84d3464bca2062e5c84876fd6f421e944929d090fea9b80e5da0d23bc81409b6fb47c349ec5d2dcd4471e5d50464a773dee71ca1559b35ae298c4fec2f5f0f
SSDEEP

1536:oVOI2MT0Z/YUNeuaoVMpxRc8sK6cDolDRLa:7I2MIR0cMG8syslDA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7222aa2f84e311162949c0122f03865_JaffaCakes118

Files

a7222aa2f84e311162949c0122f03865_JaffaCakes118
.exe windows:4 windows x86 arch:x86

785a06d8911fce44521923d214221e1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CreateFileA
WriteFile
GetCurrentProcessId
GetLastError
CreateMutexA
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
MoveFileA
GetFileAttributesA
FreeLibrary
CopyFileA
CreateProcessA
CreateDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
ExitProcess
GetTempPathA
HeapAlloc
HeapFree
HeapReAlloc
GetModuleHandleA
GetCurrentProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
OpenProcess
VirtualAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetFilePointer
HeapSize
GetLocaleInfoA
GetCPInfo
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
RtlUnwind
InterlockedExchange
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
FlushFileBuffers
TerminateProcess
Sleep
CreateToolhelp32Snapshot
Process32First
CloseHandle
Process32Next
WideCharToMultiByte
LoadLibraryA
VirtualFree
GetProcAddress

advapi32

RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegEnumValueA

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

785a06d8911fce44521923d214221e1d

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 27KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 27KB