cf646f760fb61d18b734493873d0a8d1_JaffaCakes118

General

Target

cf646f760fb61d18b734493873d0a8d1_JaffaCakes118
Size

20KB
MD5

cf646f760fb61d18b734493873d0a8d1
SHA1

ed28e00cebd691f9b5d91aba794d84fbd6ac3d7c
SHA256

852973f6299fb175e89e69bca1852b33c961acdc169578befa08da1c8a062bf0
SHA512

6a403a3abf2f679ed90d919a1bfed08fe126f67286245b83140e89ffc3155da7d07429593cad474afd467df53ff3e4dba049dcd3d7831cab646476e22a802855
SSDEEP

384:MM0OxfQVnIUdLscfdbIfhNg5Sx9XrMtjUw4V:ME3UKc83gMx9XrMt4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf646f760fb61d18b734493873d0a8d1_JaffaCakes118

Files

cf646f760fb61d18b734493873d0a8d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26d104a9e307809824e401c8beb291c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

kernel32

FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemDirectoryA
WinExec
CloseHandle
WriteFile
ExitProcess
CreateFileA

msvcrt

_onexit
__dllonexit
__CxxFrameHandler
free

advapi32

RegOpenKeyA
RegSetValueExA
RegCloseKey

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

26d104a9e307809824e401c8beb291c0

Headers

File Characteristics

Imports

msvcp60

kernel32

msvcrt

advapi32

Sections

.data Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 4B

.rsrc Size: 15KB - Virtual size: 15KB

.mjg Size: - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 15KB - Virtual size: 15KB

.mjg
Size: - Virtual size: 2KB