bc2c9e5f4f0df732b789afa9f719f686_JaffaCakes118

General

Target

bc2c9e5f4f0df732b789afa9f719f686_JaffaCakes118
Size

41KB
MD5

bc2c9e5f4f0df732b789afa9f719f686
SHA1

3e4e401567a24970058b91f35ca8c8f41bdfbaf3
SHA256

07d19dca8d1de47389b25d65337e47dc209a5996be21300d12ae77a2bd0aa6f2
SHA512

ae170c914ffeaf8881a2ad158fc25fb78f4c53a4a3fd0fd18045e96bb56d79e5d5432763f6bf5d13ef105f5bf9dd95fa757949b7ed343b64a014685763e4996e
SSDEEP

768:arWAAVT74/vgVz/QMG0G2ajpEmytBhUJM9d8St/yninwFW1TDDxXHAu:/AAV343MG0GTdEm6ByJM9d8pin7xA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc2c9e5f4f0df732b789afa9f719f686_JaffaCakes118

Files

bc2c9e5f4f0df732b789afa9f719f686_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4edd8b6943075f00c8a5d8fb3a5a2c7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
VirtualAllocEx
OpenProcess
lstrlenA
WinExec
lstrcatA
GetSystemDirectoryA
CopyFileA
Sleep
GetLongPathNameA
GetTempPathA
GetModuleFileNameA
GetExitCodeProcess
CloseHandle
GetModuleHandleA
SetFileTime
GetFileTime
CreateFileA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
TerminateProcess
GetCurrentProcessId
GetProcAddress
CreateRemoteThread
FreeResource
FindResourceA
SizeofResource
LoadResource
LockResource
GetCurrentProcess
GetStartupInfoA

advapi32

RegCreateKeyA
RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExA
RegCloseKey

msvcrt

fwrite
fopen
strlen
_except_handler3
free
fread
malloc
strcmp
strcat
strstr
exit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strlwr
fclose
_stricmp

psapi

EnumProcessModules
GetModuleFileNameExA
EnumProcesses

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4edd8b6943075f00c8a5d8fb3a5a2c7b

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

psapi

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 32KB - Virtual size: 31KB