f0b799276126d06291bd56ae2745bae5_JaffaCakes118

General

Target

f0b799276126d06291bd56ae2745bae5_JaffaCakes118
Size

3.4MB
MD5

f0b799276126d06291bd56ae2745bae5
SHA1

0c349fdb29fa951707145ba2715a7330d725ec05
SHA256

01ea9d1c8d81082aed91cf10e695f0522c71118dc3f67a9d598a967d17b9846c
SHA512

34e8355fa3bacd2a98b62e1a9b37ddbc5040cddc1f241546eaa70da7a48bdb1b54335ddda7cb71255702ec0b0c0c203ee8048cf2acb39aa26a6591e8c20e56e9
SSDEEP

98304:IbQbo0gX8Oiq5ef/LBIbOJ9QAJ1/yN0BZmEi6:Qn0gMe5pKyw20u3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0b799276126d06291bd56ae2745bae5_JaffaCakes118

Files

f0b799276126d06291bd56ae2745bae5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1917c5b7bb1ad22ceb8553f0071206a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
WideCharToMultiByte
HeapAlloc
LocalFree
DeleteCriticalSection
LeaveCriticalSection
WaitForSingleObject
CreateFileW
GetStdHandle
IsDebuggerPresent
GetCommandLineW
FindClose
ReadFile
GetFileType
TlsGetValue
HeapReAlloc
GetConsoleMode
FlushFileBuffers
TlsSetValue
TlsAlloc
HeapSetInformation
HeapSize
WriteConsoleW
TlsFree
SetFilePointer
GetFileAttributesW
CompareStringW
RtlUnwind
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
SetStdHandle
FreeEnvironmentStringsW
IsProcessorFeaturePresent
IsValidCodePage
FindFirstFileW
DeleteFileW
GetConsoleCP
LocalAlloc
ResetEvent
VirtualFree
LoadLibraryA
GetModuleHandleExW
CreateDirectoryW
GetFullPathNameW
GetExitCodeProcess
CreateProcessW

user32

DispatchMessageW
ShowWindow
DestroyWindow
ReleaseDC
MessageBoxW
PostQuitMessage
SetWindowLongW
GetWindowLongW
GetSystemMetrics
GetWindowRect
SendMessageW
EnableWindow
LoadCursorW
GetParent
SetWindowTextW
SetForegroundWindow
GetSysColor
PeekMessageW
EndPaint
KillTimer
RegisterClassW
GetWindowTextW
ClientToScreen

Sections

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1917c5b7bb1ad22ceb8553f0071206a

Headers

File Characteristics

Imports

kernel32

user32

Sections

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 1KB

.data Size: - Virtual size: 612KB

.text Size: 6KB - Virtual size: 6KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 612KB

.text
Size: 6KB - Virtual size: 6KB