039572c990edcf836724257758dd82c5_JaffaCakes118

General

Target

039572c990edcf836724257758dd82c5_JaffaCakes118
Size

116KB
MD5

039572c990edcf836724257758dd82c5
SHA1

1d945707e54fadb1276681300831ace842b2549c
SHA256

924a4fe11d29cebc935b28518cbe23455208bea1781928153ed9484a9906439d
SHA512

cfb797c1425171bce69b7b9823890d88bd5c69d06aec3d88452db928723338fe85f251e34c0c4b3b2f4b4410f03306274d9719af97876d14c16ccdda08f73d7c
SSDEEP

3072:WaPBzfDVYmWJqoHMg7Hd/JjdMpqfKAT+MLwEK:WW1DVJGHd/EpgbK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
039572c990edcf836724257758dd82c5_JaffaCakes118

Files

039572c990edcf836724257758dd82c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f08f0d56ab9ad42bc22787190ae67be2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey

user32

wsprintfA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetStdHandle
WriteFile
WideCharToMultiByte
SetEndOfFile
ReadFile
CloseHandle
CreateFileA
GetWindowsDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemDirectoryA
OpenProcess
HeapAlloc
HeapFree
GetProcessHeap
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
Sleep
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCommandLineA
GetVersion
SetHandleCount
GetEnvironmentStrings
GetFileType
GetStartupInfoA
LCMapStringW
FlushFileBuffers
GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetFullPathNameA
GetCurrentDirectoryA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetEnvironmentStringsW
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
CompareStringA
CompareStringW
GetExitCodeProcess
GetOEMCP
SetEnvironmentVariableA
SetStdHandle
GetFileAttributesA
WaitForSingleObject
CreateProcessA
SetFilePointer
LCMapStringA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f08f0d56ab9ad42bc22787190ae67be2

Headers

File Characteristics

Imports

advapi32

user32

version

kernel32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 72KB - Virtual size: 76KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 72KB - Virtual size: 76KB