d6cb1b515b6db1de4863fcd55a549195_JaffaCakes118

General

Target

d6cb1b515b6db1de4863fcd55a549195_JaffaCakes118
Size

3.4MB
MD5

d6cb1b515b6db1de4863fcd55a549195
SHA1

8a8941b4192a22cbc47e7d7db18e03ff4878ec24
SHA256

8d75e52db09f386ee5200c92edb19f4ca17bec81ab59e8ea543af69c1724fe1a
SHA512

b76b03eb86babfed9c6896648ada13bc6721875748e7b10d7a94e64ff536db2f4cdc665fa97434e1a0213b1a2a3fce3ba3aa2e1dbe48f9d3ac799633bc171799
SSDEEP

98304:xZQyQupGipugAGvoCFb9L5/c4cOO4xxaZ:xjRNpugAG1NJ5/cWRaZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6cb1b515b6db1de4863fcd55a549195_JaffaCakes118

Files

d6cb1b515b6db1de4863fcd55a549195_JaffaCakes118
.exe windows:4 windows x86 arch:x86

574bb32d98fb474e80f9a0b9f380a6ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetProcAddress
CloseHandle
UnhandledExceptionFilter
MultiByteToWideChar
SetLastError
HeapAlloc
LocalFree
EnterCriticalSection
WaitForSingleObject
GetProcessHeap
GetModuleFileNameW
IsDebuggerPresent
FindClose
ReadFile
RaiseException
FormatMessageW
TlsGetValue
InitializeCriticalSection
HeapReAlloc
TlsAlloc
HeapSize
LoadLibraryW
SetFilePointer
GetFileAttributesW
GetStringTypeW
RtlUnwind
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
SetStdHandle
FreeEnvironmentStringsW
IsProcessorFeaturePresent
FindNextFileW
IsValidCodePage
VirtualAlloc
GetConsoleCP
GetCommandLineA
ResetEvent
GetVersionExW
ReleaseMutex
CreateFileA
OutputDebugStringW
EncodePointer
LoadLibraryA
GetLocaleInfoW
GetFullPathNameW
GetExitCodeProcess

user32

TranslateMessage
LoadStringW
DispatchMessageW
ShowWindow
DestroyWindow
DefWindowProcW
PostQuitMessage
CreateWindowExW
SetWindowPos
EnableWindow
LoadCursorW
GetParent
EndDialog
SetWindowTextW
SetTimer
SetFocus
SetForegroundWindow
PeekMessageW
BeginPaint
ScreenToClient
SetCursor
InvalidateRect
RegisterClassW
EnableMenuItem
SystemParametersInfoW
GetKeyState
ClientToScreen

Sections

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

574bb32d98fb474e80f9a0b9f380a6ef

Headers

File Characteristics

Imports

kernel32

user32

Sections

.idata Size: 2KB - Virtual size: 2KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.idata
Size: 2KB - Virtual size: 2KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB