ea9bca87ee1f1b5d45b1d9a1903b0794_JaffaCakes118

General

Target

ea9bca87ee1f1b5d45b1d9a1903b0794_JaffaCakes118
Size

108KB
MD5

ea9bca87ee1f1b5d45b1d9a1903b0794
SHA1

a2f7fb0096200e8d61c37cb9961077b088445981
SHA256

622abaa9f370887bee186c72d5fc4adc288b8a135b8de976f6b8fb7968804699
SHA512

2466bc8e565bd4d55d02458b88b06cf7516cf20341e0b6c984cdb1bfab80c353ac879e08a912ddd7e4993d02532b0267b1140ebf6abf9adc24422a2d87b48c84
SSDEEP

1536:hABxSLGG2SgtoRuuODANeqdouDPgDsIlWguwaz2BqQ40E+0bQCrW:uBxSYtomD+ekDPeBuZ2h40fm7y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea9bca87ee1f1b5d45b1d9a1903b0794_JaffaCakes118

Files

ea9bca87ee1f1b5d45b1d9a1903b0794_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c669dc37de901623f258788355b4a334

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualFree
GetTempPathA
GetProcAddress
LoadLibraryA
lstrcpyA
CloseHandle
WriteFile
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
SetFilePointer
GetLastError
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA

user32

DispatchMessageA
TranslateMessage
GetMessageA
TranslateAcceleratorA
EndDialog
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c669dc37de901623f258788355b4a334

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 68KB - Virtual size: 64KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 68KB - Virtual size: 64KB