aadbc97fe94078e1d07cbabe0304815d_JaffaCakes118

General

Target

aadbc97fe94078e1d07cbabe0304815d_JaffaCakes118
Size

7KB
MD5

aadbc97fe94078e1d07cbabe0304815d
SHA1

875fa14d416ab7d3e0766b1ebe1cbbb7dd5b278c
SHA256

b95fefcea5dfef9d72436cc1eece0c0b5904eace014de96092f03ff291364050
SHA512

950cb5e6594ac7c240686a45429876c885c252ed634582fe506aa18d4c5164fbbb57816e8d32f99215c9c107a70dc3fb93459a4283c5acc7aae579c5a5e68a86
SSDEEP

192:VRUyj3ZVWblLET+xpE53EfXVOSrCcwP1oyn:4e3ZVclhxpE53EfXVOSrCcm1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aadbc97fe94078e1d07cbabe0304815d_JaffaCakes118

Files

aadbc97fe94078e1d07cbabe0304815d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80158ad3ca1ae83143f9422a763d5d0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHFileOperationA
ShellExecuteA
SHGetSpecialFolderPathA
ord680

kernel32

lstrcatA
GetSystemDirectoryA
lstrcmpiA
GetTempPathA
GetModuleFileNameA
CloseHandle
ReadFile
SetFilePointer
lstrlenA
FlushFileBuffers
WriteFile
CreateDirectoryA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
DeleteFileA
MoveFileExA
SetFileTime
GetFileAttributesExA
GetTempFileNameA
lstrcpyA
GetLastError
GetStartupInfoA
GetModuleHandleA
CreateFileA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

shlwapi

PathFindFileNameA
PathCombineA
SHGetValueA
SHSetValueA

user32

CreateWindowExA

msvcrt

fprintf
__setusermatherr
_initterm
__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
memset
strcpy
??2@YAPAXI@Z
strlen
_strdate
fclose
_acmdln
fopen
_exit
_XcptFilter
exit
_adjust_fdiv

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80158ad3ca1ae83143f9422a763d5d0e

Headers

File Characteristics

Imports

shell32

kernel32

advapi32

shlwapi

user32

msvcrt

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 92KB - Virtual size: 99KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 92KB - Virtual size: 99KB

.rsrc
Size: 1KB - Virtual size: 1KB