06d38f414df4187bb2e062140b38cbd3_JaffaCakes118

General

Target

06d38f414df4187bb2e062140b38cbd3_JaffaCakes118
Size

48KB
MD5

06d38f414df4187bb2e062140b38cbd3
SHA1

1a0dea265e5e949728c3fc3f69466aa109c52d2a
SHA256

6cf4f236c9739b629e786c18d03757050a532b7d0378f5e02a435da36bd9836b
SHA512

47ba01050184c08282c12364f78b6ce972872c6314c2866f525f1b268b3d9149fe8706d769f4a6d5091d92617281b963ce312e62481b0e5a9fa8f665676b5863
SSDEEP

768:F1zkfb5CPXb/MmObd4c6jLSr+0E8079EqkJuMFgHW:bkfb5Cj/M1bd4c6jLSrzlu9CJFgHW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06d38f414df4187bb2e062140b38cbd3_JaffaCakes118

Files

06d38f414df4187bb2e062140b38cbd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03c961e28c85dc58f23f8337c847e333

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

SetLastError
WaitForSingleObject
CreateProcessA
GetCurrentDirectoryA
GetCommandLineA
GetWindowsDirectoryA
GetVersionExA
CopyFileA
FindFirstFileA
GetPrivateProfileStringA
GetSystemDirectoryA
GetModuleHandleA
GetStartupInfoA
GetVersion
GetLastError
GetFileAttributesA
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
InterlockedDecrement
InterlockedIncrement
GetProcAddress
LoadLibraryA
ReadFile
LCMapStringW
SetStdHandle
SetFilePointer
FlushFileBuffers
GetLocaleInfoA
GetLocaleInfoW
CloseHandle
LCMapStringA

user32

CharUpperA

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

03c961e28c85dc58f23f8337c847e333

Headers

File Characteristics

Imports

version

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 13KB - Virtual size: 18KB

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 13KB - Virtual size: 18KB

.idata
Size: 2KB - Virtual size: 1KB