041e078a3e2fd02e7094aeb6902014bd_JaffaCakes118

General

Target

041e078a3e2fd02e7094aeb6902014bd_JaffaCakes118
Size

31KB
MD5

041e078a3e2fd02e7094aeb6902014bd
SHA1

4390154ba41882d129fe610fe3117743b97b2197
SHA256

bf392bc63918c6b505dc1d5e562942abedbc0087d32bc74eefa56a1af5b6b2e1
SHA512

14bc5b3756757baa99d431e295713a5ce81bfd41441f58563ea4b4a5c2730baa3b4f22a3e119e30dc8ead530765707a7b756da1a82e33e0bb609569f40ace673
SSDEEP

768:m1L/hOrMZn6oHkIZxr7M1673wz1SaO9OiaMEz9h8aMgLa1qhRYdjpkc:m1L/hOrMZOIZ17M1673wZSn9OiaMEz92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
041e078a3e2fd02e7094aeb6902014bd_JaffaCakes118

Files

041e078a3e2fd02e7094aeb6902014bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ad97164994bb2f082130b190ec87976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
lstrcatA
lstrcpyA
CreateFileA
GetFileAttributesA
CreateDirectoryA
GetSystemDirectoryA
lstrlenA
GetVersionExA
Process32Next
Process32First
CreateToolhelp32Snapshot
ExitThread
Sleep
DeleteFileA
TerminateThread
WaitForMultipleObjects
GetModuleFileNameA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetWindowsDirectoryA
SetFileTime
ReadFile
GetProcAddress
SetFilePointer
CloseHandle
LoadLibraryA
ResetEvent
lstrcmpA
WaitForSingleObject
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleA
GetCommandLineA
CreateEventA
SetEvent
CreateThread
CreateProcessA
CompareStringA
SizeofResource
LoadResource
FindResourceA

user32

TranslateMessage
IsWindowUnicode
wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
GetWindowThreadProcessId
PeekMessageA
CreateWindowExA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegNotifyChangeKeyValue
RegOpenKeyA
RegEnumKeyA
RegCloseKey

wininet

InternetGetConnectedState

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ad97164994bb2f082130b190ec87976

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

iphlpapi

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 668B

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 668B

.rsrc
Size: 6KB - Virtual size: 5KB