eaba38e1d0623de833ef7d938f806b02_JaffaCakes118

General

Target

eaba38e1d0623de833ef7d938f806b02_JaffaCakes118
Size

48KB
MD5

eaba38e1d0623de833ef7d938f806b02
SHA1

cc36228385609e3a3f50d149cbe47a3cdea61bac
SHA256

0927dcf9fb35372ace76fa964a3d808a0d39041e09097e9ae18e35bd32041ac1
SHA512

f33387f3af7e8d5d6e8d466d6d8753959b3f5a04b96175f18cb5bd0b6c2d3ca373ea9ca5186f58bd720471c9bdfc1b51b452f28cb8d3dc3d4f7de0c691ad6850
SSDEEP

384:iqx+opce1mk6RtBikXDZ09X5jgjAF+XPZrEyD/8jphOu1sNrAuBiALPl:iFoCyILZ09IXlZD/AazN5BTLt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaba38e1d0623de833ef7d938f806b02_JaffaCakes118

Files

eaba38e1d0623de833ef7d938f806b02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a56428f59ce0c93ba00894764f1ccd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
CreateFileA
SetPriorityClass
lstrlenA
lstrcpynA
GetCurrentProcess
GetCurrentThread
WriteFile
SetProcessPriorityBoost
Sleep
IsBadWritePtr
TerminateProcess
lstrcatA
GetEnvironmentVariableA
SetThreadPriority
GetShortPathNameA
GetModuleFileNameA
WinExec
CloseHandle
GetTempPathA
lstrcpyA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetLastError
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW

user32

wsprintfA

shell32

SHChangeNotify
ShellExecuteExA

wininet

InternetOpenUrlA
HttpQueryInfoA
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetGetConnectedState

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a56428f59ce0c93ba00894764f1ccd5

Headers

File Characteristics

Imports

kernel32

user32

shell32

wininet

iphlpapi

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 176B

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 176B