d1cbd7d2278294b9d5052875bec7faf6_JaffaCakes118

General

Target

d1cbd7d2278294b9d5052875bec7faf6_JaffaCakes118
Size

43KB
MD5

d1cbd7d2278294b9d5052875bec7faf6
SHA1

85e73698ca6913f4a4d4f42cd99c61b6b2a09a39
SHA256

6190ee7d5fb00dc04f3e9396aa67efaabbacc3d9f3cc2fdae48530de29daaf22
SHA512

2f1f632a452f16c96b2c3460c2fb828443d1c896b2669d6aa562cd9b299add674500f6d72beca91aee5a72cea7eded5a648bab08207671b607aad84caa9edc0b
SSDEEP

768:Y/lSzal/PHD5JyCSq0G9sYkod8s/6tAv4aPxki/sg:YllwCSauLgHiM4aPxCg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1cbd7d2278294b9d5052875bec7faf6_JaffaCakes118

Files

d1cbd7d2278294b9d5052875bec7faf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ee3c1a6a7a2c4323ecc79a88fb87336

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindNextFileA
GetModuleFileNameA
GetWindowsDirectoryA
lstrcmpiA
FindFirstFileA
WinExec
CreateDirectoryA
CopyFileA
FreeEnvironmentStringsA
GetOEMCP
GetCPInfo
GetACP
FlushFileBuffers
SetStdHandle
lstrlenA
CloseHandle
ReadFile
GetFileSize
CreateFileA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
WritePrivateProfileStringA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
LCMapStringW
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
LCMapStringA
GetStringTypeA
IsBadCodePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
GetLastError
SetFilePointer
GetStringTypeW
GetProcAddress
LoadLibraryA

user32

PeekMessageA
SendMessageA
DispatchMessageA
TranslateMessage
LoadStringA
MessageBoxA
GetActiveWindow

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7ee3c1a6a7a2c4323ecc79a88fb87336

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 10KB - Virtual size: 15KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 10KB - Virtual size: 15KB