f6195e41c03f4d567d35812eec48866e_JaffaCakes118

General

Target

f6195e41c03f4d567d35812eec48866e_JaffaCakes118
Size

3.4MB
MD5

f6195e41c03f4d567d35812eec48866e
SHA1

85b93b06604062e0cce570a1d0b124834ffe85c0
SHA256

db5b2aafbad1a88561545c4aac13c53a1e2b49d14794b250a5c059bb1d3e0e6e
SHA512

c134b89873a0cc588311f7f9993eaeae798623cc6189f61215a04eeba910d70ce1bf7ce4e21a6658621b44570ae5abaf89e6cce6df94356989d793e1fd18b045
SSDEEP

98304:iNXjlMYi+ppDzRHmSRl8WsFDIwZOS2xOeV8Nw9:8zlm+vnRl8WvwZOS4OeV8S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6195e41c03f4d567d35812eec48866e_JaffaCakes118

Files

f6195e41c03f4d567d35812eec48866e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b148af1a5c0d62ec304aa4196551edd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
SetLastError
HeapAlloc
LocalFree
EnterCriticalSection
WriteFile
WaitForSingleObject
GetProcessHeap
GetModuleFileNameW
GetStdHandle
RaiseException
FormatMessageW
GetFileType
HeapReAlloc
FlushFileBuffers
TlsSetValue
CreateEventW
TlsAlloc
HeapSetInformation
CreateThread
GetCPInfo
TlsFree
CompareStringW
GetStringTypeW
RtlUnwind
LCMapStringW
GetModuleFileNameA
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsProcessorFeaturePresent
FindFirstFileW
VirtualAlloc
GetConsoleCP
DecodePointer
SetEndOfFile
ResetEvent
ReleaseMutex
VirtualFree
lstrlenW
LoadLibraryA
GetModuleHandleExW
GetFullPathNameW
GetExitCodeProcess

user32

TranslateMessage
LoadStringW
DispatchMessageW
ShowWindow
DestroyWindow
ReleaseDC
PostQuitMessage
CreateWindowExW
SetWindowLongW
GetMessageW
GetDlgItem
GetSystemMetrics
PostMessageW
GetClientRect
SetWindowPos
EnableWindow
LoadCursorW
EndDialog
SetTimer
LoadIconW
SetFocus
PeekMessageW
ScreenToClient
SetCursor
EnableMenuItem
GetWindow
MessageBoxA
CharUpperW

Sections

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6b148af1a5c0d62ec304aa4196551edd

Headers

File Characteristics

Imports

kernel32

user32

Sections

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 1KB

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB