ac1202611b3cdea7a3dd5d1f3e543f2f_JaffaCakes118

General

Target

ac1202611b3cdea7a3dd5d1f3e543f2f_JaffaCakes118
Size

17KB
MD5

ac1202611b3cdea7a3dd5d1f3e543f2f
SHA1

13130864f3a186c99e4af030c1aa57c7f7cb8460
SHA256

71384e073385cef1690e247fa8e46da418e078129f3afaef69c0cfb045d5b254
SHA512

70ec55e3a38224a24ae7b3bc174a381a2afde5ad8792ed5f7b234a32fd3bce79ff7c8d1fa87ad53adc61ae9072f541c08a7f47b29b8aee19ceec85cab96834cf
SSDEEP

384:Y4C2+P1QJjyoWWMcfAFfejTDaCDmbaNeeQqljk4D6s00Uc:x5+NQJjXKmjT2CDmbaNLk4t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac1202611b3cdea7a3dd5d1f3e543f2f_JaffaCakes118

Files

ac1202611b3cdea7a3dd5d1f3e543f2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e189d85efe6bb10b0d05d30086517b8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
EnterCriticalSection
InitializeCriticalSection
MoveFileA
GetFileAttributesA
GetDiskFreeSpaceA
GetCommandLineA
GetCurrentProcess
WaitForSingleObject
SetErrorMode
lstrcatA
GetCurrentDirectoryA
GetTickCount
ExitProcess
GetModuleFileNameA
GetLastError
LeaveCriticalSection
DeleteCriticalSection
Sleep
GetModuleHandleA
GetStartupInfoA

user32

PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

msvcrt

_XcptFilter
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
??2@YAPAXI@Z
strcpy
calloc
free
__dllonexit
_onexit
_exit
exit
_controlfp

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11.2MB - Virtual size: 11.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e189d85efe6bb10b0d05d30086517b8c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

version

Sections

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 4KB

.ndata Size: 512B - Virtual size: 4B

.rsrc Size: 11.2MB - Virtual size: 11.2MB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 4KB

.ndata
Size: 512B - Virtual size: 4B

.rsrc
Size: 11.2MB - Virtual size: 11.2MB