dfa4701042b17663a63e2ae281012317_JaffaCakes118

General

Target

dfa4701042b17663a63e2ae281012317_JaffaCakes118
Size

50KB
MD5

dfa4701042b17663a63e2ae281012317
SHA1

9d7f1fd3d3fed37b32dfd1956f5c6d1d9f813a28
SHA256

85cd6cedc946230faef273c9cce7dd606103d64cef71b718e6534f3ad0f065a5
SHA512

4b8ece0c78e5f19ff716dae21dbbb164a42d783d70359f28787382105d3310a187021cf13e0043c7d7682e8ef0d8dd4962abaf24caeb1e6beb0a039221a0e4e5
SSDEEP

768:ChXeJlp22toVgjsQ9KUEQCXLj2+bEdEv0ej82cWWOIKaNHWxETxAhnaDUa2+ki3l:vlftEgjziFEuxjFqOIKalW2QaP3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfa4701042b17663a63e2ae281012317_JaffaCakes118

Files

dfa4701042b17663a63e2ae281012317_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8eddbe0e3d6f81b4f84549d896d3fe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA

msvcrt

strncpy
strrchr
strstr
_except_handler3
sprintf
fwrite
fread
fclose
fseek
fopen

kernel32

Sleep
CloseHandle
ReadFile
GetFileSize
CreateFileA
CompareStringA
GetProcAddress
GetModuleHandleA
lstrlenA
GetLastError
GetCurrentProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
ExitProcess
WinExec
GetModuleFileNameA
GetEnvironmentVariableA
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
WriteFile
SizeofResource
LockResource
LoadResource
FindResourceA
CreateMutexA
TerminateProcess
LoadLibraryA
GetTickCount
CreateThread
DeleteFileA

user32

wsprintfA
DispatchMessageA
TranslateMessage
PeekMessageA
GetWindowThreadProcessId
FindWindowA
SetTimer
KillTimer
GetMessageA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

netapi32

Netbios

Sections

.data
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8eddbe0e3d6f81b4f84549d896d3fe9

Headers

File Characteristics

Imports

wininet

msvcrt

kernel32

user32

advapi32

netapi32

Sections

.data Size: 7KB - Virtual size: 10KB

.rsrc Size: 42KB - Virtual size: 41KB

.data
Size: 7KB - Virtual size: 10KB

.rsrc
Size: 42KB - Virtual size: 41KB