2d8e365d8fcad155e35a5ab182efa0c1_JaffaCakes118

General

Target

2d8e365d8fcad155e35a5ab182efa0c1_JaffaCakes118
Size

88KB
MD5

2d8e365d8fcad155e35a5ab182efa0c1
SHA1

75704ae99dc9f23e154d492bbccf8d9ec2c2e3b3
SHA256

02b1d2be6ce1599292403d28b3b9ace1fdbfefcbed671715143999c7890631c4
SHA512

1b8bc0639429ad40d5e97f1d45819296b5a5a31848de5a817653f02e1dd6dfdb78683ab188a3d0091ccad36c42e2e627f32da9e936dc2434b28f1682997c7552
SSDEEP

1536:XAKs4VA3KVtY45XKq+FzgSMtHI7FEdxHkbM:XAMA6VCOXX+Fz/eHI7FEdNF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d8e365d8fcad155e35a5ab182efa0c1_JaffaCakes118

Files

2d8e365d8fcad155e35a5ab182efa0c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ab5e19983ac1c850c1093f04855e0df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcessId
GetLastError
HeapFree
GetProcessHeap
LoadLibraryW
lstrcatA
GetModuleFileNameA
WaitForMultipleObjects
GetSystemDirectoryA
ReleaseMutex
HeapAlloc
PulseEvent
GetFileAttributesA
lstrlenA
lstrcmpA
ResetEvent
CreateThread
GetFileSize
SetEvent
GetModuleHandleW
CreateEventA
CreateMutexW
MultiByteToWideChar
CreateProcessA
WriteFile
GetModuleHandleA
FindClose
FindNextFileA
FindFirstFileA
CreateFileA
lstrcpyA
SizeofResource
LoadResource
FindResourceA
CloseHandle
WaitForSingleObject
GetWindowsDirectoryA

user32

wsprintfA

gdi32

GetStockObject

advapi32

RegNotifyChangeKeyValue
RegSetValueExA
RegCreateKeyExA
InitializeSecurityDescriptor
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

OleUninitialize
OleInitialize

shell32

SHGetFolderPathA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ab5e19983ac1c850c1093f04855e0df

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shell32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 516B

.rsrc Size: 67KB - Virtual size: 67KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 516B

.rsrc
Size: 67KB - Virtual size: 67KB