b24e549ade3b781c8db0cec3362d7d8f_JaffaCakes118

General

Target

b24e549ade3b781c8db0cec3362d7d8f_JaffaCakes118
Size

43KB
MD5

b24e549ade3b781c8db0cec3362d7d8f
SHA1

de5029c6d28a076bb395ea39e0acfc5d3ed879c4
SHA256

5faf9eb37117be9e9802f1269faa7fbf9e0eaac9ed629e0fe68eee1fa474294f
SHA512

9cb1dc74e539b3c87dfc9668b44685839c92887a33ba2666b9d6402f62a2127e715f4cc40243dbf86f1aa48eb5858478c6b5c79fe175039dd7b3322330eb68f7
SSDEEP

768:53DOS4COZ+c2Am7Vq1hBGWw42g0dsXlHqQSTquojTNgnGgr2nPEAwOF4aQ:5CJZhh117dw42gSy9qdpLGgr2PEAwOBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b24e549ade3b781c8db0cec3362d7d8f_JaffaCakes118

Files

b24e549ade3b781c8db0cec3362d7d8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69b33769276dc755a83127415730d066

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareStringA
CreateEventA
CreateFileA
CreateFileMappingA
DuplicateHandle
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExitThread
FileTimeToLocalFileTime
FormatMessageA
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetFileAttributesA
GetFileTime
GetLastError
GetPrivateProfileStringA
GetProcAddress
GetStartupInfoA
GetTempPathA
GetThreadLocale
HeapDestroy
HeapFree
InitializeCriticalSection
InterlockedDecrement
IsBadReadPtr
IsValidLocale
LCMapStringA
LocalAlloc
LocalFree
LockResource
MoveFileA
MoveFileExA
OpenEventA
OutputDebugStringA
QueryPerformanceCounter
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SuspendThread
TlsFree
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WritePrivateProfileStringA
lstrlenA

user32

CheckRadioButton
RegisterClassExA
SetWindowTextA

advapi32

AllocateAndInitializeSid
LockServiceDatabase
LookupAccountSidA
QueryServiceStatus
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegQueryValueExA

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69b33769276dc755a83127415730d066

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 30KB - Virtual size: 29KB

.DATA Size: 3KB - Virtual size: 12KB

.data Size: 6KB - Virtual size: 8KB

.idata Size: 2KB - Virtual size: 4KB

.text
Size: 30KB - Virtual size: 29KB

.DATA
Size: 3KB - Virtual size: 12KB

.data
Size: 6KB - Virtual size: 8KB

.idata
Size: 2KB - Virtual size: 4KB