ec859a1bb4449db7668a66aa8d0fa37f_JaffaCakes118

General

Target

ec859a1bb4449db7668a66aa8d0fa37f_JaffaCakes118
Size

330KB
MD5

ec859a1bb4449db7668a66aa8d0fa37f
SHA1

f7c84927ab098ca2c2aa34ec1c86c928bd16ae09
SHA256

92e1ac3613532741bc00db57be1ce93cdab4035afc45ddcf871bc5965b1c32db
SHA512

9fecd8ca4c3e6ec6b24ac632a9673d9081df28af35ee0606005c4b55da608503b2103ac479fcec214ffedcfbe2756befcf37efb156e4b193626b29851f57f722
SSDEEP

6144:PKR3PofJzI0cCArdw33NPb4z+WqsfPGTva/EAADrrAui:P83oBjAB6Ps+WPXCy/Enfkui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec859a1bb4449db7668a66aa8d0fa37f_JaffaCakes118

Files

ec859a1bb4449db7668a66aa8d0fa37f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21800d65d05c571ea8f8623e15dc1682

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
TerminateThread
VirtualFree
VirtualProtect
Sleep
VirtualAlloc
GetLastError
GlobalFree
LocalAlloc
FreeResource
LockResource
LoadResource
VirtualAllocEx
SizeofResource
GetLocalTime
ResumeThread
LoadLibraryA
GetModuleHandleW
GetProcAddress
GetModuleHandleA
PulseEvent
LocalLock
CreateEventW
lstrcmpiA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
GetSystemInfo
HeapFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType

user32

GetDC
PostQuitMessage
KillTimer
LoadImageA
LoadBitmapA
MessageBoxA
CreateIcon
SetCursor
GetDesktopWindow
LoadCursorW
GetCursorPos
SetTimer
ReleaseDC
IsIconic
GetWindowRect
SetCursorPos

ws2_32

WSACleanup
WSAStartup
WSAAsyncGetProtoByName

msacm32

acmDriverAddW
acmDriverDetailsW
acmDriverClose

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21800d65d05c571ea8f8623e15dc1682

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

msacm32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 298KB - Virtual size: 298KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 298KB - Virtual size: 298KB