aa6dbebe27870c11d81a36fa4300b0da_JaffaCakes118

General

Target

aa6dbebe27870c11d81a36fa4300b0da_JaffaCakes118
Size

44KB
MD5

aa6dbebe27870c11d81a36fa4300b0da
SHA1

ef0d546318593f42a5056f1bea3fc60cdb0ab0ba
SHA256

98ed68c1e674e4c3812f29256893378dc23058c0261eaba627eff75251bdc0d4
SHA512

b32acccb397096fa455571d237461c846ac440efb7dad9b8b6e1bf52357f956ad398a9518b54da4ef04d10d6ba7960bbf19535dbcefd9fc7523f7f5b4aa0bbcb
SSDEEP

768:gEUKoICO4DbxcCwKyxv4lGcTEggJKGa483/XcnTE5FlbR:1MfFdwKyN4lGvJKLfDFlbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa6dbebe27870c11d81a36fa4300b0da_JaffaCakes118

Files

aa6dbebe27870c11d81a36fa4300b0da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2aad4039b1be3a94887ceb53b0f82b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
lstrlenA
FindFirstFileA
FindNextFileA
CreateProcessA
GlobalAlloc
DeleteFileA
GetExitCodeProcess
Sleep
lstrcmpA
GetCommandLineA
CreateFileA
GetLocalTime
CompareStringA
WideCharToMultiByte
MultiByteToWideChar
ReadFile
SetFilePointer
GetFileSize
GetTickCount
VirtualProtect
GetLocaleInfoA
WriteFile
SetFileTime
CloseHandle
GetSystemDirectoryA
GlobalFree
GetStringTypeW
GetStringTypeA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapFree
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetSystemInfo

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA

urlmon

URLOpenBlockingStreamA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d2aad4039b1be3a94887ceb53b0f82b5

Headers

File Characteristics

Imports

kernel32

user32

advapi32

urlmon

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 3KB