5743c8db43eb6ff28c675baaaa71ec3a_JaffaCakes118

General

Target

5743c8db43eb6ff28c675baaaa71ec3a_JaffaCakes118
Size

56KB
MD5

5743c8db43eb6ff28c675baaaa71ec3a
SHA1

80fd9428f9d36e15052e8608f5bca385f60f386e
SHA256

714c781e4dcdf70293ba686e7c6d193778eff76c7ca689bacbc2d3fb209d70c1
SHA512

4870455ac2c8bb80afadf29bd1f466f210dfc9381cd11cdffbda858a660b98209ac95aff56908f2d5ace3483a22e6af78353df10a604ca14d55121c13bcdf9b1
SSDEEP

768:0PYj7q2VqGcmC0wu7KJ6v0GIuGUUTn119nF39PbM7l4As:s07qGNxKJ6vzvGXb119F3Eld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5743c8db43eb6ff28c675baaaa71ec3a_JaffaCakes118

Files

5743c8db43eb6ff28c675baaaa71ec3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7638530ca8da5d14e6b12c8dc9b92df7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
WriteFile
CreateFileA
WaitNamedPipeA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetTempPathA
GetSystemDirectoryA
CreateEventA
OpenEventA
DeleteFileA
MoveFileExA
Sleep
GetPrivateProfileStringA
WritePrivateProfileStringA
GetVolumeInformationA
GetFileSize
CompareStringW
CompareStringA
FlushFileBuffers
GetStringTypeW
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
SetEnvironmentVariableA

user32

wsprintfA

netapi32

Netbios

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7638530ca8da5d14e6b12c8dc9b92df7

Headers

File Characteristics

Imports

kernel32

user32

netapi32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 17KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 17KB