38638fe2cd06f88fa4b7947632cfbc13_JaffaCakes118

General

Target

38638fe2cd06f88fa4b7947632cfbc13_JaffaCakes118
Size

27KB
MD5

38638fe2cd06f88fa4b7947632cfbc13
SHA1

7543de1599c9e37f7b5e99dab7e46e725805ae6f
SHA256

239bf4b2d83b0ea310b34a89b88496eff68d9870634cc076fb3d8dd58b616d29
SHA512

54d996b627629af2cbac90005ca632efad9edeb5216b32c4f441fdd1d020ed2f32c9f9653253ad008636d02291233c0dd06f2de7529b98fd5d5d0b63c927ec0c
SSDEEP

384:qWDtIPcHHNtxof+2yimnExv0IYjD9g8V7vhsWeroYViHUR6hHuaM:3JIcuW2HwEF7cDJvhruiHk6hvM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38638fe2cd06f88fa4b7947632cfbc13_JaffaCakes118

Files

38638fe2cd06f88fa4b7947632cfbc13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ac842bc70308c8bb62492224c269e1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteFileA
CopyFileA
WinExec
GetCurrentDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
lstrcmpiA
lstrcpyA
lstrcmpA
FindClose
FindNextFileA
CreateMutexA
lstrcatA
GetLogicalDriveStringsA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDrives
SetFileAttributesA
MoveFileA
GetFileAttributesA
CreateDirectoryA
GetProcAddress
LoadLibraryA
GetLocalTime
GetTempPathA
GetWindowsDirectoryA
ExpandEnvironmentStringsA
GetLastError
CloseHandle
CreateThread
FindFirstFileA
Sleep

user32

IsWindow
SendMessageA
EnumChildWindows
GetForegroundWindow
GetWindowLongA
GetClassNameA
GetCursorPos
WindowFromPoint
GetParent
GetWindowTextA
MessageBoxA
PostMessageA

advapi32

RegDeleteKeyA
RegEnumKeyA
RegCreateKeyA
RegCloseKey

msvcrt

__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
_except_handler3
_controlfp
__set_app_type
??2@YAPAXI@Z
exit
fclose
fputs
sprintf
fopen
strstr
printf
fwrite
fread
fseek
rand
srand
time
fgets
_exit
_XcptFilter

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

ws2_32

gethostbyname
gethostname
WSACleanup
WSAStartup

Sections

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2ac842bc70308c8bb62492224c269e1b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

wininet

ws2_32

Sections

.data Size: 27KB - Virtual size: 26KB

.data
Size: 27KB - Virtual size: 26KB