cdd7cb73d73a20e78dfb36dd3fc94b60_JaffaCakes118

General

Target

cdd7cb73d73a20e78dfb36dd3fc94b60_JaffaCakes118
Size

183KB
MD5

cdd7cb73d73a20e78dfb36dd3fc94b60
SHA1

23adc7d734ce34af1027b90ff4e7e661803c3ada
SHA256

bd7ff5a210c9f40dfd2fcfe19683b0937c72200a65200d2d56ab579b20079ebf
SHA512

d308b8ead5ac20a9bf61572f0fa185a31c26235aa8f0dc8e5193b2ae11cede5fa343299d286936be18b59ee0c4236bc4544f5bdaaaf598abff7e9bb5f348fefc
SSDEEP

3072:wrlQVdBDmPNQ6BTLaj0vYfakiaByQ2rYlfCTfvDEbOWhTBwHSo8M2DY36r:wrKdMlZlagcDBaMATbWhtmSzY3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdd7cb73d73a20e78dfb36dd3fc94b60_JaffaCakes118

Files

cdd7cb73d73a20e78dfb36dd3fc94b60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fc7d4a2887c418ee88ca5503884e91d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptCreateHash
CryptHashData
CryptReleaseContext
CryptAcquireContextA
CryptGetHashParam
CryptDestroyHash

imagehlp

ImageNtHeader
ImageRvaToVa
ImageGetDigestStream
ImageDirectoryEntryToData

msvfw32

ICInfo

shell32

CommandLineToArgvW

psapi

GetProcessMemoryInfo

kernel32

OutputDebugStringA
SetFileAttributesA
CreateFiberEx
SetFileAttributesW
DeleteFileW
DeleteFileA
DebugBreak
FindClose
LoadLibraryExA
RemoveDirectoryA
EscapeCommFunction
EndUpdateResourceW
CreateDirectoryW
GetFileAttributesW
CreateDirectoryA
GetOEMCP
EnumResourceNamesW
GetFileAttributesA
UpdateResourceW
LoadLibraryExW
BeginUpdateResourceW
FatalExit
FreeLibrary
lstrlenA
RemoveDirectoryW
ReadFile
GetFullPathNameA
CopyFileW
AreFileApisANSI
GetFullPathNameW
CopyFileA
GetFileInformationByHandle

user32

MonitorFromWindow
CharNextA
wsprintfW
CharNextW

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fc7d4a2887c418ee88ca5503884e91d

Headers

File Characteristics

Imports

advapi32

imagehlp

msvfw32

shell32

psapi

kernel32

user32

Sections

.text Size: 158KB - Virtual size: 158KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 21KB - Virtual size: 20KB

.lib Size: 512B - Virtual size: 76KB

.text
Size: 158KB - Virtual size: 158KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 21KB - Virtual size: 20KB

.lib
Size: 512B - Virtual size: 76KB