b1bf57ba60b91147f2608961f7e41c7b_JaffaCakes118

General

Target

b1bf57ba60b91147f2608961f7e41c7b_JaffaCakes118
Size

93KB
MD5

b1bf57ba60b91147f2608961f7e41c7b
SHA1

ef095e52a1c0c9ee15a9d7118720a454ddc679d6
SHA256

94449396325a478a75decf6af1afca99c43a28ec0581c27b5f0a3f143ba221d0
SHA512

46b372de07e8f4395f1bc3785786b7e3fcb6ecaa826788773574f7f5a4a0173bcdc167b32d3ec040637348a4d7dfe1299819454ba96611d6aef37723f4d740ab
SSDEEP

1536:4WpUItX29wk9T3jinVKUj/atoIOUoGE8dQiIzUQFhD:436f/atnOYNd9IwQFhD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1bf57ba60b91147f2608961f7e41c7b_JaffaCakes118

Files

b1bf57ba60b91147f2608961f7e41c7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a253c1dca0b632451429eaa23f51028

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
MoveFileA
WriteFile
lstrcpyA
GetWindowsDirectoryA
FreeLibrary
LoadLibraryA
Sleep
GetCurrentDirectoryA
GetModuleFileNameA
GetCurrentProcess
CheckRemoteDebuggerPresent
ContinueDebugEvent
WaitForDebugEvent
CreateProcessA
IsDebuggerPresent
LocalAlloc
LocalFree
lstrcmpA
GetSystemDirectoryA
lstrcatA
CreateFileA
CloseHandle
GetTempPathA
lstrlenA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
SetUnhandledExceptionFilter
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
UnhandledExceptionFilter
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

MessageBoxA

advapi32

RegSetValueExA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

Sections

.text
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tasle
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a253c1dca0b632451429eaa23f51028

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 31KB - Virtual size: 32KB

.tasle Size: 25KB - Virtual size: 28KB

.rsrc Size: 35KB - Virtual size: 36KB

.text
Size: 31KB - Virtual size: 32KB

.tasle
Size: 25KB - Virtual size: 28KB

.rsrc
Size: 35KB - Virtual size: 36KB