c872b61f07397c45da4ab3f1d5cbf392_JaffaCakes118

General

Target

c872b61f07397c45da4ab3f1d5cbf392_JaffaCakes118
Size

13KB
MD5

c872b61f07397c45da4ab3f1d5cbf392
SHA1

1f53b61fd1679445c7b65d6651c5203d2fbebf1e
SHA256

e221e9cf80d83a0db44fba699a6052c347c587edda7d0af482eaa80d319809de
SHA512

ff298085d17a3c4f032cacbca79221074dcbb637c10fff90f6ed3fecea0c6edb119de90ea6d40a287db9dffb1df16dc4a3b9449cf153e9b6e525de3c2a0edb98
SSDEEP

384:meO5cG/ThnNsSbXTZkPcip7DRfVrNI4jcWaZH4rcrsp:Y5cG/ThNRbX4cyDFVrN7jnIH4Ir

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c872b61f07397c45da4ab3f1d5cbf392_JaffaCakes118

Files

c872b61f07397c45da4ab3f1d5cbf392_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3bffdd91a25742db209146ebebe34359

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32First
CreateToolhelp32Snapshot
Sleep
lstrcmpiA
SetFileAttributesA
GetTickCount
GetTempPathA
CopyFileA
lstrcatA
GetModuleFileNameA
WinExec
GetSystemTime
GetLastError
CreateMutexA
MoveFileExA
GetStartupInfoA
GetModuleHandleA
Process32Next
CreateFileA
WriteFile
CloseHandle
DeleteFileA

user32

FindWindowA
ShowWindow
FindWindowExA
DefWindowProcA
PostQuitMessage
CreateWindowExA
UpdateWindow
LoadIconA
LoadCursorA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
PostMessageA
IsWindowEnabled
SetForegroundWindow
wsprintfA
SendMessageA
RegisterClassExA

advapi32

RegOpenKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegQueryValueExA

shell32

ShellExecuteA

msvcrt

__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
remove
fscanf
__CxxFrameHandler
strcpy
fopen
_strcmpi
fprintf
fclose
exit
strstr
memset
strlen
_except_handler3
_controlfp
__set_app_type

ws2_32

WSAStartup
gethostbyname
WSACleanup

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

Sections

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bffdd91a25742db209146ebebe34359

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

ws2_32

wininet

Sections

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 2KB - Virtual size: 2KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 2KB - Virtual size: 2KB