01042286fec3f743bd3609fc486d6a8a_JaffaCakes118

General

Target

01042286fec3f743bd3609fc486d6a8a_JaffaCakes118
Size

10KB
MD5

01042286fec3f743bd3609fc486d6a8a
SHA1

7dace304baf7800fb2bde81efcfbfeca374fb836
SHA256

e69413775b1c499b535717a2c6048cf74706900977d787528e74609f6058f7a8
SHA512

5254d6bae90557acbc734f6107c533502658c3087b5070f4ef059376abbda18805bc82bc597a692cee9d0eb8d7ffd777299dafaf93346ee634a500ece7a4cf79
SSDEEP

192:10MCWVkFVu4+wfkbe1zIDsCZ9ciuMsHctKw7q+t0PtRIfco+y:10GVkywj1zwsCZegs+P7zVfcoL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01042286fec3f743bd3609fc486d6a8a_JaffaCakes118

Files

01042286fec3f743bd3609fc486d6a8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9fb349155e0a4bb9178859380501f286

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
PeekMessageA
SendMessageA
LoadCursorA
GetSystemMetrics
GetMessageA
GetDlgItemTextA
EndPaint
TranslateMessage
UpdateWindow
MessageBoxA
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint

kernel32

CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeResource
GetCommandLineA
GetEnvironmentVariableA
GetFileSize
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetTempPathA
GlobalFree
HeapAlloc
LoadResource
LockResource
MoveFileA
ReadFile
RtlMoveMemory
SetErrorMode
SetFilePointer
SizeofResource
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

advapi32

RegCreateKeyExA
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
RegSetValueExA
RegDeleteKeyA
CryptAcquireContextA
RegCloseKey
CryptReleaseContext
CryptHashData

shlwapi

PathFindFileNameA
PathFindExtensionA
PathMatchSpecA

gdi32

CreateFontIndirectA

comctl32

InitCommonControls

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9fb349155e0a4bb9178859380501f286

Headers

File Characteristics

Imports

user32

kernel32

shell32

advapi32

shlwapi

gdi32

comctl32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 984B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 984B