3b8e9552ac0eec17ea94d9c4bd2a2322_JaffaCakes118

General

Target

3b8e9552ac0eec17ea94d9c4bd2a2322_JaffaCakes118
Size

7KB
MD5

3b8e9552ac0eec17ea94d9c4bd2a2322
SHA1

57b322327cf3ad31cec8c01f59a7c5c5a4ed2532
SHA256

e1fb9589cafb5b5eeac5c5a8abae5863bf65a60424b91d900a5e833f466b70a7
SHA512

aa7ab81083749b1901be369f8500daeccfb010c0fa6c029f80f61bc5df2968150bc412ed88adfbf27445184cb3302d443c3f3f0618df244cb51bb0ca25ef9525
SSDEEP

192:gzMKjQwqqFAjPdxZwkzaq3V0NCc5QAWv:uMtwnFg5J3V85QAWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b8e9552ac0eec17ea94d9c4bd2a2322_JaffaCakes118

Files

3b8e9552ac0eec17ea94d9c4bd2a2322_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b16c8e46719f4dc7a462853311659669

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
GetCurrentProcess
GetSystemDirectoryA
CloseHandle
GetLastError
lstrcatA
lstrcpyA
Sleep
DeleteFileA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
WriteFile
CreateFileA
SizeofResource
LoadResource
FindNextFileA
CreateEventA
CreateProcessA
ReadFile
OpenProcess
CreateRemoteThread
GetProcAddress
WriteProcessMemory
VirtualAllocEx
GetCurrentProcessId
Process32Next
lstrcmpA
lstrlenA
Process32First
CreateToolhelp32Snapshot
SetFilePointer
GetModuleFileNameA
FindClose
GetTickCount
GetTempFileNameA
FindResourceA
GetFileAttributesA

user32

wsprintfA
CharUpperA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b16c8e46719f4dc7a462853311659669

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 44B

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 44B

.rsrc
Size: 27KB - Virtual size: 27KB