2e68e3f09493fa05b318e15a22d117c1_JaffaCakes118

General

Target

2e68e3f09493fa05b318e15a22d117c1_JaffaCakes118
Size

196KB
MD5

2e68e3f09493fa05b318e15a22d117c1
SHA1

6575e54fcadf29b19805c6d4aeb55d4826d8c29f
SHA256

67db788db53c4d604fa87cef85dca5ee3170a68d7f7a165faba239f33e44ed73
SHA512

bfb4552894dd789d18ddb02a11d408f33d638f6c7ba548f955febd4355d6e419c5f7b24f04aea6bd7994c8683aeaced35b03741d3446eb6060e0cf6fc4c9a859
SSDEEP

3072:LbrHMnKq2aGKX7EYZQ6jJ6GNhTYepZsNR7CDj:LbrHNq2aH74SJHTYepCNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e68e3f09493fa05b318e15a22d117c1_JaffaCakes118

Files

2e68e3f09493fa05b318e15a22d117c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81953c3ef058df510aa9af49ea3a29bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
LoadResource
SizeofResource
GetModuleHandleA
FindResourceA
lstrcpyA
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
VirtualAlloc
GetProcAddress
GetVersionExA
ReadFile
MoveFileExA
CreateProcessA
FreeLibrary
Sleep
LoadLibraryA
WriteFile
VirtualFree
GetSystemInfo
CloseHandle
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81953c3ef058df510aa9af49ea3a29bf

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 160KB - Virtual size: 159KB

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 160KB - Virtual size: 159KB