ffa6380b2bf885b88cbc0caebbedc2bb_JaffaCakes118

General

Target

ffa6380b2bf885b88cbc0caebbedc2bb_JaffaCakes118
Size

992KB
MD5

ffa6380b2bf885b88cbc0caebbedc2bb
SHA1

bf5c9fcf0175a1e8d20860f98e56ae6dfb19d5ed
SHA256

b24cca5d59c52b469acada53dc4dd0a7cf3b84354a4a1a3496d262775a20dd1d
SHA512

787c032ef058640e549d465305be1d84f180c15078999e129e76c25ea760cf96ff48ae84cdd93d51bf01e306a07fc6ae8c07e1efcde9f6f457a769d13c63f082
SSDEEP

24576:ebWzAKE5m3LYL2sCOXHOseNZ2o+sT05fw7e:xAp5i3OessCsTQoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffa6380b2bf885b88cbc0caebbedc2bb_JaffaCakes118

Files

ffa6380b2bf885b88cbc0caebbedc2bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94a2d2b9a5e5aa3bb40b8624f6ad5fc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_beginthreadex
_access
sprintf
_except_handler3
free
realloc
malloc
??2@YAPAXI@Z
__CxxFrameHandler
_ftol
memmove
??3@YAXPAX@Z

kernel32

GetFileSize
RaiseException
LocalAlloc
GetStartupInfoA
GetModuleHandleA
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcmpiA
CopyFileA
GetCurrentThreadId
ExpandEnvironmentStringsA
WinExec
OpenEventA
GetLocalTime
CreateDirectoryA
OpenProcess
DuplicateHandle
DeleteFileA
GetModuleFileNameA
ExitProcess
GetVersionExA
GetSystemInfo
GlobalMemoryStatusEx
GetDriveTypeA
GetDiskFreeSpaceExA
InitializeCriticalSection
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
Sleep
EnterCriticalSection
VirtualAlloc
CreateEventA
CloseHandle
WaitForSingleObject
ResetEvent
lstrcpyA
SetEvent
InterlockedExchange
CancelIo
WriteFile
SetFilePointer
CreateFileA
ReadFile
GetWindowsDirectoryA
GetFileAttributesA
CreateProcessA
lstrlenA
TerminateThread
lstrcatA
GetTickCount
GetLastError
GetCurrentProcess
HeapAlloc
GetProcessHeap
VirtualProtect
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 940KB - Virtual size: 938KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94a2d2b9a5e5aa3bb40b8624f6ad5fc2

Headers

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 940KB - Virtual size: 938KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 940KB - Virtual size: 938KB