db7c4981f4a6c580b8e64035a8fc032c_JaffaCakes118

General

Target

db7c4981f4a6c580b8e64035a8fc032c_JaffaCakes118
Size

11KB
MD5

db7c4981f4a6c580b8e64035a8fc032c
SHA1

1e9a7730426df6502f7a32615a63abf904d9e213
SHA256

49850ec90cce5ec0265ac2147f2fbc9abb5177e9b28a9f092c6c1c74e0b2945e
SHA512

d71e3f93ba0293988a6a28fc3534e144bea5fff2918251661e725324a332d23e723f09845eb3f6397c7e13bae85997a3ce378c505b26a9eeac695ad2deeddd53
SSDEEP

192:2hQmu3/k3plJnMNRCj+6XU8QQrB7LbpiVLZxOn+P4oynKFNUf+uC:2h0/k3pDn8sj+6Fh7vpiVLZxOno4AFN0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db7c4981f4a6c580b8e64035a8fc032c_JaffaCakes118

Files

db7c4981f4a6c580b8e64035a8fc032c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3eef3158d270e3aea1edbff77b25c831

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CopyFileA
DeleteFileA
lstrcpyA
lstrcatA
GetSystemDirectoryA
GetLastError
CreateEventA
SuspendThread
CloseHandle
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryA
lstrlenA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
CreateThread
FreeLibrary
GetModuleFileNameA

user32

GetParent
GetCursorPos
wsprintfA

advapi32

RegSetValueA
RegCloseKey

msvcrt

_stricmp
_controlfp
fclose
fputs
fopen
atoi
_mkdir
__CxxFrameHandler
puts
sprintf
_itoa
fgets
strstr
fgetc
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_strrev

rpcrt4

UuidCreateSequential

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3eef3158d270e3aea1edbff77b25c831

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

rpcrt4

wininet

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 632B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 632B