e7aaa493057a46d27453f462717df3f1_JaffaCakes118

General

Target

e7aaa493057a46d27453f462717df3f1_JaffaCakes118
Size

157KB
MD5

e7aaa493057a46d27453f462717df3f1
SHA1

421e61e17d5df6f6b36c8f87c3373a71f70334ee
SHA256

2e31b00188d8fbd3c8d548fbf9103f61b3222976b45d637ded902d624a57a8d8
SHA512

6ab1b61893983241795c639b5607d94c60629b31ffc313601d11cf860f75208698bf2ad8cd6e66175b337e7b36255021e0ffb12be4dce0b91399ea39471c2c02
SSDEEP

3072:uyjeJhyDR+FrRLIT7+cXmImWpJMd40wD+sc8dgSgmUoODRU+lLyHgNlOCzg:udbFrVIdXRHvl0wKv8d2DRU+tVnOC0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7aaa493057a46d27453f462717df3f1_JaffaCakes118

Files

e7aaa493057a46d27453f462717df3f1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

32c5330a54d1f194d4b09d2282e1f21c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
HeapReAlloc
LeaveCriticalSection
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
GetCurrentProcessId
CloseHandle
CreateFileW
ReadFile
HeapCreate
HeapAlloc
GetFileSize
EnterCriticalSection
ExitProcess
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
DeleteCriticalSection
GetLastError
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetProcAddress
GetModuleHandleW
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
SetUnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType

user32

DestroyWindow
GetMessageA
GetClassNameA
GetWindowRect
LoadIconA
GetClientRect
SendMessageA
GetDC
TranslateMessage
MessageBoxA
GetWindowLongA
CreateWindowExA
GetDlgItem
GetDesktopWindow
SetWindowPos
ShowWindow
DispatchMessageA
GetMenuInfo
CloseWindow
LoadCursorA
RegisterClassA
MoveWindow
UnregisterClassA

gdi32

GetFontLanguageInfo
GetFontData

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 126KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32c5330a54d1f194d4b09d2282e1f21c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 126KB - Virtual size: 129KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 126KB - Virtual size: 129KB

.rsrc
Size: 2KB - Virtual size: 1KB