d4cd1be0cd11b6c14b60e755422385b6_JaffaCakes118

General

Target

d4cd1be0cd11b6c14b60e755422385b6_JaffaCakes118
Size

49KB
MD5

d4cd1be0cd11b6c14b60e755422385b6
SHA1

4c02be1d1920ceed76c90d1eac98b574cf9efdd3
SHA256

afd7d82302e25dfbffe28f379a95d8ef19a37e5c4523460a737fe9da0feaf297
SHA512

3884dc8f61dc2c2a25e3abf58541f99b7d5655e3e231e5d8141c4e39dd4cc95606046f0d53c1782e437a39fad69fa63bdf4b5127163a3c5db6734620c56b08f1
SSDEEP

768:BFYZfRBNLAcfvWW4lsYSJ+Lx4Ne3tG/yHryX:U9xAcffYSAlt+yHrI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4cd1be0cd11b6c14b60e755422385b6_JaffaCakes118

Files

d4cd1be0cd11b6c14b60e755422385b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53145e7d9c2dca12ec6216474020303d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
WinExec
CopyFileA
lstrcpyA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetTickCount
lstrcatA
GetSystemDirectoryA
ExitThread
SetProcessWorkingSetSize
GetCurrentProcess
CreateProcessA
CreateThread
SetFileAttributesA
GetLastError
CloseHandle
ReleaseMutex
OpenMutexA
GetTempPathA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetEnvironmentVariableA
GetShortPathNameA
WaitForSingleObject
ExitProcess
CreateMutexA
lstrlenA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
HeapAlloc
TerminateProcess
RtlUnwind
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
SetFilePointer
GetStdHandle
WriteFile
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53145e7d9c2dca12ec6216474020303d

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 13KB - Virtual size: 18KB

.rsrc Size: 1024B - Virtual size: 896B

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 13KB - Virtual size: 18KB

.rsrc
Size: 1024B - Virtual size: 896B