0419c19c3503d35567406890545ae4f7_JaffaCakes118

General

Target

0419c19c3503d35567406890545ae4f7_JaffaCakes118
Size

44KB
MD5

0419c19c3503d35567406890545ae4f7
SHA1

48dc4230fe0b799ed525c7063d7015ac24158357
SHA256

e36c07dd343f0128a225b07f96483536227b907f7c87e12c007027a418affaa8
SHA512

0af6104c95bc26a5703434fb8498ef4e1ac369b2d903a8dd74e7243303002d57d77fa027606f008b57efcf79347c70efc68fa7c07fc64e3601a92fe1da358bc4
SSDEEP

768:iUOmMf1CzQ2VVmAV18/vGpMoE6OoFzJYoquJPDF2J4PstfvMEXlwJPWOyt7HdmEx:TE2VgvEwoFziZuJLMmPsJMEKPWOytBr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0419c19c3503d35567406890545ae4f7_JaffaCakes118

Files

0419c19c3503d35567406890545ae4f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb5aefc09269b224fd08c0e56e74ef6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
CreateEventA
CreateProcessA
CreateToolhelp32Snapshot
DeleteCriticalSection
EnumSystemLocalesA
ExitProcess
GetConsoleCP
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetFullPathNameA
GetLastError
GetOEMCP
GetProcessHeap
GetShortPathNameA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GlobalLock
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedExchange
IsBadReadPtr
IsBadWritePtr
LoadLibraryA
LoadResource
Module32First
MultiByteToWideChar
OpenEventA
OutputDebugStringA
QueryPerformanceCounter
ReadFile
SearchPathA
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
WriteConsoleA
WritePrivateProfileStringA
lstrcatA

user32

GetCursorPos
IsWindow
RegisterClipboardFormatA

advapi32

AllocateAndInitializeSid
DeleteService
LockServiceDatabase
LookupPrivilegeValueA
QueryServiceStatus
RegQueryValueExA
RegSetValueExA
StartServiceA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb5aefc09269b224fd08c0e56e74ef6b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 1024B - Virtual size: 9KB

.bss Size: 8KB - Virtual size: 12KB

.idata Size: 2KB - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 1024B - Virtual size: 9KB

.bss
Size: 8KB - Virtual size: 12KB

.idata
Size: 2KB - Virtual size: 4KB