b7c27632e4afc9f0a099d5d7cbf7a7bb_JaffaCakes118

General

Target

b7c27632e4afc9f0a099d5d7cbf7a7bb_JaffaCakes118
Size

92KB
MD5

b7c27632e4afc9f0a099d5d7cbf7a7bb
SHA1

4959e9ccb93e4215f55372380da4be0be4a985da
SHA256

a4b458da03eb0961c214bc504d81c375bbb46eec3942d214707ed1ed65e96c54
SHA512

c7c23e0f97b0cd8fc89a143349370e3ca7f4478378a55b3dd656a51dc2694bf2e643fd5bfb5cd522a3786c7717189d31ff16abc46add4f8e1bfe0bc0d0dbfa11
SSDEEP

1536:gR1QKjMW2qmFJeoGFynrXhHyXY+hLK/xR7b4GU7103TXLIlCRCMziW6lVd:gR1RAFJeoGFynrXh8Y+o/vpU7103TbMB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7c27632e4afc9f0a099d5d7cbf7a7bb_JaffaCakes118

Files

b7c27632e4afc9f0a099d5d7cbf7a7bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e821dd589fd6bfd7f472f9bbaf725769

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
GetStringTypeW
FormatMessageA
LocalFree
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetCurrentProcess
GetLastError
GlobalAlloc
FlushFileBuffers
GlobalFree
GetStringTypeA
SetFilePointer
HeapReAlloc
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
SetStdHandle

user32

PeekMessageA
TranslateMessage
DispatchMessageA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegSetValueExA

shell32

ShellExecuteExA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

shlwapi

PathFileExistsA

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e821dd589fd6bfd7f472f9bbaf725769

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

version

shlwapi

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 56KB - Virtual size: 56KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 56KB - Virtual size: 56KB