f015c62ee80e61e144ee608edbdd44e8_JaffaCakes118

General

Target

f015c62ee80e61e144ee608edbdd44e8_JaffaCakes118
Size

156KB
MD5

f015c62ee80e61e144ee608edbdd44e8
SHA1

1281d45993273d1f386275d49f78a59f441ddb8c
SHA256

74317968d195d92b45f91537ecfd6ecdb14114cf7890f7e9c6f74efcf419f7a7
SHA512

cc2dd08f3ce9e0292d268f28454f4dc894dff368048cce89f33faaf956dc7706ee712da51116d29b0057056b7e423c4965372f7c62da50e988d2cba8268f71e0
SSDEEP

768:FRXFaobeDZFZRjonxL2pNrJuDosMe+5bNEEdC/ZignMas46V9yVJlCyI0kosxK8b:laobe/8srJuosMx5KEdCggnWp9gKosAE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f015c62ee80e61e144ee608edbdd44e8_JaffaCakes118

Files

f015c62ee80e61e144ee608edbdd44e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e395e220334b3613b0add0dfd1a9783

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
HeapAlloc
GetCurrentProcess
LCMapStringW
LCMapStringA
SetStdHandle
CloseHandle
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
SetHandleCount
GetFileType
Sleep
TerminateProcess
GetStringTypeW
FreeEnvironmentStringsW
HeapReAlloc
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
ReadFile
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetConsoleCtrlHandler
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
GetStringTypeA

advapi32

RegOpenKeyExA
RegSetValueExA
RegQueryValueExA

odbc32

ord24
ord75
ord41
ord3
ord11
ord13
ord43
ord31

Sections

.text
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e395e220334b3613b0add0dfd1a9783

Headers

File Characteristics

Imports

kernel32

advapi32

odbc32

Sections

.text Size: 128KB - Virtual size: 124KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 11KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 128KB - Virtual size: 124KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 11KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 3KB