c11a1b3204754c3a14e06be913e78c62_JaffaCakes118

General

Target

c11a1b3204754c3a14e06be913e78c62_JaffaCakes118
Size

20KB
MD5

c11a1b3204754c3a14e06be913e78c62
SHA1

0a7a4e576b4fa3537a63448be4ebad397fa65d31
SHA256

778e83162690bdf378aaf232ae83f564f87d6de3ad8060d9910a8d303234e456
SHA512

7b1b037ab7d2210530ba5e100ad1d2f284e79d4bef807dac058cc9859687eb3bacccf85211c7ac9f393a5ca1e189fe4a6e2a36665fd65d49abea06c65a816f6e
SSDEEP

384:Lc0OxfQVnIddLscfdbIfhNg5Sx9XrMtjHj4V:LU3dKc83gMx9XrMtL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c11a1b3204754c3a14e06be913e78c62_JaffaCakes118

Files

c11a1b3204754c3a14e06be913e78c62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26d104a9e307809824e401c8beb291c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

kernel32

FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemDirectoryA
WinExec
CloseHandle
WriteFile
ExitProcess
CreateFileA

msvcrt

_onexit
__dllonexit
__CxxFrameHandler
free

advapi32

RegOpenKeyA
RegSetValueExA
RegCloseKey

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26d104a9e307809824e401c8beb291c0

Headers

File Characteristics

Imports

msvcp60

kernel32

msvcrt

advapi32

Sections

.data Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 4B

.rsrc Size: 15KB - Virtual size: 15KB

.data
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 15KB - Virtual size: 15KB