efec0dcdbbef33468dce2fb1517066d8_JaffaCakes118

General

Target

efec0dcdbbef33468dce2fb1517066d8_JaffaCakes118
Size

177KB
MD5

efec0dcdbbef33468dce2fb1517066d8
SHA1

44b13feb2f5b10eddf5d0a9f74a7309c8f94b1a0
SHA256

eb03f13e67ad3a226e18b64ac57bbdce14dfdc017b3c5f29efab55067eac5258
SHA512

32444c5e1a1f26fabf8f1f88abbc891cf4ce4202739b7293a0fd4093a53c3385e7dab937f75fe1f214d3cb0e6cf72ccec2ce5d356d197caed5e6e352d6b1ca8a
SSDEEP

3072:ewxGnsdL+gfZimMKSOm+KGFUsg/23MNTlsIoZo3Zsi/6HI295:4sVfZiGSOmVGF+23MX+a/6H/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efec0dcdbbef33468dce2fb1517066d8_JaffaCakes118

Files

efec0dcdbbef33468dce2fb1517066d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52d5f92c69e5db16fe33b1ed6f83d381

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
GetTickCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetLocalTime
CloseHandle
WriteFile
CreateFileA
ReadFile
SetFilePointer
GetFileSize
GetSystemDirectoryA
MultiByteToWideChar
TransactNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
CreateProcessA
FindClose
FindNextFileA
FindFirstFileA
GetTimeFormatA
GetDateFormatA
GetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
LoadLibraryA
GetLastError
ExitThread
GetModuleHandleA
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
ExpandEnvironmentStringsA
GetTempPathA
GetComputerNameA
CopyFileA
WideCharToMultiByte
GetCurrentProcess
TerminateProcess
OpenProcess
DeleteFileA
GetCurrentProcessId
SetFileAttributesA
WaitForSingleObject
CreateMutexA
TerminateThread
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
CreatePipe
GlobalMemoryStatus
GetVersionExA
GetModuleFileNameA
CreateThread
GetProcAddress
Sleep
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
SetEndOfFile

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

52d5f92c69e5db16fe33b1ed6f83d381

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 118KB - Virtual size: 117KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 53KB - Virtual size: 380KB

.text
Size: 118KB - Virtual size: 117KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 53KB - Virtual size: 380KB