b36a456b0323a9728f03094dbc1e7d40_JaffaCakes118

General

Target

b36a456b0323a9728f03094dbc1e7d40_JaffaCakes118
Size

72KB
MD5

b36a456b0323a9728f03094dbc1e7d40
SHA1

e776a80862484c70030e2c4589f75dd3302e6484
SHA256

862ac3fa90839e70edbe11ad2b8297ac00f2f009d1ceee76617dbe63588063f2
SHA512

a87fecb849ad53bd216915d956f35dc4c12796460544763636dab08a2fb2aa018e630ed31abaf30b37d165e3813aa282f5b8a442b7f58a34a0628068ac85eff6
SSDEEP

1536:UEGGVEf0RXdbwWXip6ApyZf2LrUogbyT9rNhpB9wRMHm:UElbRXpwoQpyVYrUFbad7wr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b36a456b0323a9728f03094dbc1e7d40_JaffaCakes118

Files

b36a456b0323a9728f03094dbc1e7d40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3415e8d6211cdddf150495a5c4761b39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeviceIoControl
CreateFileA
GetVolumeInformationA
lstrcpyA
GetWindowsDirectoryA
ExitProcess
TerminateProcess
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
IsBadWritePtr
GetComputerNameA
WriteFile
lstrlenA
GetCurrentProcessId
GetFileType
lstrcatA
GetVersionExA
GetSystemDirectoryA
Sleep
GetTempPathA
CreateProcessA

user32

wsprintfA
GetDlgItem

shell32

ShellExecuteExA
SHChangeNotify

msvcrt

sprintf
atol
_except_handler3
strncpy
rand
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
strstr
srand
time
strncat
_strdup
atoi

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z

shlwapi

PathGetDriveNumberA

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 69KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3415e8d6211cdddf150495a5c4761b39

Headers

File Characteristics

Imports

kernel32

user32

shell32

msvcrt

msvcp60

shlwapi

wininet

Sections

.text Size: 69KB - Virtual size: 70KB

.rdata Size: 2KB - Virtual size: 2KB

.text
Size: 69KB - Virtual size: 70KB

.rdata
Size: 2KB - Virtual size: 2KB