b0241dd5f8f7dbb794b6976be9784fe1_JaffaCakes118

General

Target

b0241dd5f8f7dbb794b6976be9784fe1_JaffaCakes118
Size

48KB
MD5

b0241dd5f8f7dbb794b6976be9784fe1
SHA1

3b3f6a2a340e4cef81ba7231e7ef36a119a46cf5
SHA256

de942fc13d086595ee89cdbca9a97b3af52bec13f2f6c26e104a086039a05a5f
SHA512

418810a6b775972c31017a40ed663d61dfc0d59d6c6c8c57651eb79bcfb94886ffe37e5060045d75443e2b3870c5cfcb9e01cd053c2c8a79329c8a99117d6521
SSDEEP

384:Jp1T5DSvZD6VQYW/XISYov2Wq/SclgyCeCllhAVrFOKNc7Nksa6gORxSoZo02W0a:71TJSvZDvYAd0Bi/pKKKNJ6PvSoZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0241dd5f8f7dbb794b6976be9784fe1_JaffaCakes118

Files

b0241dd5f8f7dbb794b6976be9784fe1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97bb1a215c8d1952ad0dfe76cfc3c967

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
Sleep
GetModuleFileNameA
GetTempFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetTempPathA
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
CreateFileA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
SetFilePointer
ReadFile
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
GetModuleHandleA
GetLastError
CloseHandle
GetCurrentProcess
GetProcAddress
LoadLibraryA
TerminateProcess
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy

user32

wsprintfA

shell32

ShellExecuteA

shlwapi

SHSetValueA

ws2_32

inet_addr

wininet

HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

97bb1a215c8d1952ad0dfe76cfc3c967

Headers

File Characteristics

Imports

kernel32

user32

shell32

shlwapi

ws2_32

wininet

advapi32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 19KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 19KB