f6ba3ad31ea29fec53c7e4137a735df1_JaffaCakes118

General

Target

f6ba3ad31ea29fec53c7e4137a735df1_JaffaCakes118
Size

520KB
MD5

f6ba3ad31ea29fec53c7e4137a735df1
SHA1

e910a7419cf78a7a9ad3e66e0c7d21fbcfbd412f
SHA256

dcea8169fa571ef3aab2b0256acd2e14b85a47a3f39c6a44527f29298002ccce
SHA512

81235caf63977cb99c32e2211fcbae2619be0a0e81c44c244654f4310d9bfbcc47462c92d0d6a71ff0663de6e62a2bd801524c623f44d6b46e92b168454782fb
SSDEEP

12288:IgTnxrYBzlE2jz/Us15ZEJ/vtOppXpQTc6AzOmSwQzVR/EK87cz:ImBqzljjbUg5otODXyTc4mSwQz3btz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6ba3ad31ea29fec53c7e4137a735df1_JaffaCakes118

Files

f6ba3ad31ea29fec53c7e4137a735df1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88ae003c98f573f54c53cc12859d00dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
HeapAlloc
TlsSetValue
GetFileType
Sleep
TlsGetValue
FindClose
VirtualQuery
HeapCreate
TerminateProcess
GetStringTypeW
HeapReAlloc
GetACP
CloseHandle
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
FormatMessageA
SetFilePointer
GetStringTypeA
GetCPInfo
RaiseException
GetProcessHeap
FreeEnvironmentStringsW
HeapSize
SetErrorMode
WideCharToMultiByte
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
GetModuleFileNameA
LoadLibraryA
GetEnvironmentStringsW
GetThreadLocale
GetTickCount
FreeLibrary
lstrlenA
SetHandleCount
GetStdHandle
HeapFree
VirtualAlloc
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
TlsAlloc
SetLastError
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
VirtualFree
RtlUnwind
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetOEMCP
GetProcAddress
MultiByteToWideChar
LCMapStringA
LCMapStringW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 468KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

88ae003c98f573f54c53cc12859d00dc

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 468KB - Virtual size: 464KB

.data Size: 24KB - Virtual size: 26KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 468KB - Virtual size: 464KB

.data
Size: 24KB - Virtual size: 26KB