f0a0657f8acbaf9c9c630a5517ed8163_JaffaCakes118

General

Target

f0a0657f8acbaf9c9c630a5517ed8163_JaffaCakes118
Size

225KB
MD5

f0a0657f8acbaf9c9c630a5517ed8163
SHA1

8558601b6337057bfd93f1da0cf2d9d7a9c2f7bc
SHA256

a1be1d8b9390d42110707e8fefef48e1f299009a50a650bc689d75fe1bdde869
SHA512

429752602903859b4e33805eeb02676b5b4ce936fcdc312eab8bbd65fd6fcd655c3f8069517778a0d94be9ff3db200d65e13ce9beab16ad67ce18dd3578e95b0
SSDEEP

6144:Xaz/zwzFEN3MmUGvSQagFwDeSv3BU9T4/XGOA:Iz8qamFVa1D69T4k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0a0657f8acbaf9c9c630a5517ed8163_JaffaCakes118

Files

f0a0657f8acbaf9c9c630a5517ed8163_JaffaCakes118
.exe windows:4 windows x86 arch:x86

996c28a7ca9593c58676225db02903dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
Sleep
CreateProcessA
GetModuleFileNameA
DeleteFileA
CreateFileA
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
FlushFileBuffers
SetFileTime
FileTimeToSystemTime
GetFileTime
GetLastError
CreateDirectoryA
HeapFree
HeapAlloc
GetProcessHeap
GetStringTypeW
GetStringTypeA
SetEndOfFile
ReadFile
WriteFile
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
DeleteCriticalSection
SetFilePointer
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
HeapReAlloc
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW

shell32

ord680

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

996c28a7ca9593c58676225db02903dc

Headers

File Characteristics

Imports

kernel32

shell32

iphlpapi

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 228KB - Virtual size: 226KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 228KB - Virtual size: 226KB