edd46bad4c0615ce9dfca503a4f6797d_JaffaCakes118

General

Target

edd46bad4c0615ce9dfca503a4f6797d_JaffaCakes118
Size

3.4MB
MD5

edd46bad4c0615ce9dfca503a4f6797d
SHA1

894a6e92752113406c73c0d154640dfa8fe89191
SHA256

7442a55dd7d7f87b421d1a31c23dd5a0f2fc3cfe2c743b670741322c8f778cd9
SHA512

467620a48e7e7ea61b5899eb2bea78d09f05c66a545812b39a600ec7d7b75f3d6c40125326d389370d835c5dd6a9c4eb152286cd680fff8d71b5e599b6781b73
SSDEEP

98304:UWmzm7iN2yPcOtLVWul0RAfNfpqc7q3LEacIoMk1:M8GntLYtCfA4acUe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edd46bad4c0615ce9dfca503a4f6797d_JaffaCakes118

Files

edd46bad4c0615ce9dfca503a4f6797d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0738a41975fd36d71e697e7db166d7dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCurrentProcess
GetSystemTimeAsFileTime
GetModuleHandleW
QueryPerformanceCounter
CloseHandle
TerminateProcess
UnhandledExceptionFilter
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
SetLastError
HeapFree
HeapAlloc
LocalFree
DeleteCriticalSection
LeaveCriticalSection
WriteFile
GetProcessHeap
GetStdHandle
GetStartupInfoW
IsDebuggerPresent
GetCommandLineW
FindClose
SetEvent
GetACP
FormatMessageW
GetFileType
TlsGetValue
GetConsoleMode
FlushFileBuffers
TlsAlloc
HeapSetInformation
HeapSize
WriteConsoleW
LoadLibraryW
LoadLibraryExW
CreateThread
GetFileAttributesW
GetStringTypeW
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsProcessorFeaturePresent
FindNextFileW
DeleteFileW
VirtualAlloc
DecodePointer
CreateFileA
LoadLibraryA
GetModuleHandleExW
CreateDirectoryW
ExpandEnvironmentStringsW

user32

TranslateMessage
LoadStringW
ShowWindow
DefWindowProcW
MessageBoxW
SetWindowLongW
GetWindowLongW
GetMessageW
GetDlgItem
GetDC
SendMessageW
GetClientRect
SetWindowPos
EnableWindow
IsWindow
LoadCursorW
EndDialog
SetWindowTextW
SetTimer
LoadIconW
SetFocus
GetSysColor
PeekMessageW
ScreenToClient
GetWindow
SystemParametersInfoW
GetKeyState
MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0738a41975fd36d71e697e7db166d7dc

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 2KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 2KB