3cd9433d5c3206675d7a56858e7077ff_JaffaCakes118

General

Target

3cd9433d5c3206675d7a56858e7077ff_JaffaCakes118
Size

44KB
MD5

3cd9433d5c3206675d7a56858e7077ff
SHA1

377a232087d24e0578cd6bb110e391b0360f9020
SHA256

741f8a1cb410b9d503f8f60c84e418c4b6c8f089ec1fe233f312cafe2fa0b9cb
SHA512

097d3f5be74878ad0dc4cab0f84bdfc84fb87850c29ca6eaec44064bd13909ff40532be6bd31ae5309ac15d39a25cda1edae4c44155d55a1f2a66af6e696f81d
SSDEEP

384:jyxgMrUH6u+DCiNj7C2K0zkk2FS6XQPy5hQ7jJG0yoz1/g2IzLLRq:jfM4H6u+TNj+mSi8hgjJ1yo5/bwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cd9433d5c3206675d7a56858e7077ff_JaffaCakes118

Files

3cd9433d5c3206675d7a56858e7077ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4400350f557c9cc005e0a10a74c972d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetProcAddress
LoadLibraryExA
GetModuleFileNameA
GetPrivateProfileStringA
VirtualFree
VirtualAlloc
GetUserDefaultLCID
ExpandEnvironmentStringsA
FormatMessageA
SearchPathA
GetCurrentProcess
GetStdHandle
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetLastError
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
WriteFile
LCMapStringA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

LVRTTable

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4400350f557c9cc005e0a10a74c972d5

Headers

File Characteristics

Imports

kernel32

user32

advapi32

version

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 8KB - Virtual size: 12KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 8KB - Virtual size: 12KB