38d721a4c80575f58982ca76ff67e263_JaffaCakes118

General

Target

38d721a4c80575f58982ca76ff67e263_JaffaCakes118
Size

56KB
MD5

38d721a4c80575f58982ca76ff67e263
SHA1

5cf15c7e7b182828b82583990a1790fe7eb394ab
SHA256

a088b9f74d5b9b69348d22f48c0b565212b11fc50d698d9ae5fddeaf3653b06e
SHA512

a878b832384ff613d70838ac68a46a62a118b2ee627e1eee1eba3b289a4554be44be7ad844cb1418779df066296dce2310d5e76610cd628f9cd6433bfd66a235
SSDEEP

768:qimPXmdTvoEcQFW/oDt4b2uHDafu8fsHXxt3JN6P:qivdTvo6aRHc0t3SP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38d721a4c80575f58982ca76ff67e263_JaffaCakes118

Files

38d721a4c80575f58982ca76ff67e263_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd6a1161f08027f1c21143d0b20d5a99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
CopyFileA
GetTempPathA
DeleteFileA
WaitForSingleObject
OpenProcess
Process32Next
Module32First
CloseHandle
Process32First
CreateToolhelp32Snapshot
GetLongPathNameA
lstrcmpiA
GetModuleFileNameA
GetSystemDirectoryA
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
GetCurrentProcess
GetProcAddress
GetModuleHandleA
lstrcpyA
SetFileAttributesA
CompareStringA
CreateMutexA
SetStdHandle
LoadLibraryA
GetLastError
FormatMessageA
GetFileAttributesA
LocalFree
GetStringTypeW
GetStringTypeA
LCMapStringW
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
SetFilePointer
HeapAlloc
VirtualAlloc
HeapReAlloc

user32

MessageBoxA

advapi32

RegDeleteValueA
RegCloseKey
RegOpenKeyExA

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd6a1161f08027f1c21143d0b20d5a99

Headers

File Characteristics

Imports

kernel32

user32

advapi32

setupapi

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 8KB - Virtual size: 5KB