a8c75a407fbb730f4c042acd9029c99c_JaffaCakes118

General

Target

a8c75a407fbb730f4c042acd9029c99c_JaffaCakes118
Size

492KB
MD5

a8c75a407fbb730f4c042acd9029c99c
SHA1

9227099ce96ebe23a5d90b1886e57fbec1a5b9ef
SHA256

b47b2c4f165076e385c401bfd1bc73fea714065fbca999ed391ddf5bafbfac9b
SHA512

2c6cd4c35994af355f57ac2582b56ed81e61750162ca41a35dabecd2f67b9f7987a2c6671fa04bc08b359222d2a37f3223f47679ee86b8d9ebfcafba44dc82d6
SSDEEP

1536:OHL0MoVo4HzK3E5+Dy5easAJe7ajF+iWIeakkFPu:EoVo/3E5+Dy5BBeeMQWkFG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8c75a407fbb730f4c042acd9029c99c_JaffaCakes118

Files

a8c75a407fbb730f4c042acd9029c99c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8df890a36f716e6dfb01055ab32524d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
CreateEventA
CreateMutexA
CloseHandle
SetEvent
GetLastError
CreateThread
WaitForSingleObject
GetVersionExA
CreateProcessA
ReadFile
WriteFile
CreateRemoteThread
GetProcAddress
VirtualAllocEx
lstrlenA
OpenProcess
GetCurrentProcess
VirtualProtect
IsBadStringPtrA
lstrcmpiA
Sleep
DeleteFileA
FindClose
FindNextFileA
FindFirstFileA
SetFilePointer
GetModuleFileNameA
SizeofResource
LoadResource
FindResourceA
Process32Next
Process32First
CreateToolhelp32Snapshot
CompareStringA
CompareStringW
lstrlenW
CreateFileA
lstrcpyA
GetSystemDirectoryA
WriteProcessMemory
GetFileAttributesA

user32

wsprintfA

advapi32

CreateProcessAsUserA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8df890a36f716e6dfb01055ab32524d4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 48B

.rsrc Size: 380KB - Virtual size: 380KB

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 48B

.rsrc
Size: 380KB - Virtual size: 380KB