f6bb86f44eb6531473d55b017497ac2d_JaffaCakes118

General

Target

f6bb86f44eb6531473d55b017497ac2d_JaffaCakes118
Size

148KB
MD5

f6bb86f44eb6531473d55b017497ac2d
SHA1

4aa26b2bb1362b3b20519f7e1b6855776e68826a
SHA256

422e9ddaee6d755375b41fc8e3f1b406b2ad2019b809533098017536785907c9
SHA512

57d0314d60d42484fb28f7ab13ce454a43dcc65acc95047d0dd2c07596375ae58c8efaefdc8f9a3431309bc85d8e28531050c8f68ac499369865ce92bfad394f
SSDEEP

3072:Gd3Z7stZMRYPTB8ilfPSGSlCunRDSMdV:GdpcMR+F8aSlCWRDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6bb86f44eb6531473d55b017497ac2d_JaffaCakes118

Files

f6bb86f44eb6531473d55b017497ac2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7416aff118d18f856a06aded5bc67188

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadMenuA

kernel32

HeapCreate
CloseHandle
WaitForMultipleObjects
CreateThread
VirtualAlloc
GetProcAddress
LoadLibraryA
VirtualFree
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLastError
RaiseException
SetUnhandledExceptionFilter
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
Sleep
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7416aff118d18f856a06aded5bc67188

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 80KB - Virtual size: 78KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 80KB - Virtual size: 78KB

.reloc
Size: 8KB - Virtual size: 5KB