464f68eb45b7d8cae948ea6c8dfe017d_JaffaCakes118

General

Target

464f68eb45b7d8cae948ea6c8dfe017d_JaffaCakes118
Size

296KB
MD5

464f68eb45b7d8cae948ea6c8dfe017d
SHA1

63958b9029f0870398c346e1f8b214ac9aa3839d
SHA256

9f06291866f7a68dcfcc78c5eb628a4b8c5c03a4cff2dc32cd511cf4bb308547
SHA512

3ae3253270c49e55e27fad090fba02692ef5866a818fe5c4ef765d62094adb8278f6ddf47f77975f0686018689a783fcbb8f5fdee79fefbc343993dd565567ef
SSDEEP

6144:xeAE/5/N0vvLSf0tTcWwRUQN/XAmsF0nxgQsw:kAGQ1TxjULsFyuQsw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
464f68eb45b7d8cae948ea6c8dfe017d_JaffaCakes118

Files

464f68eb45b7d8cae948ea6c8dfe017d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2055655f29765e6b2b94402ee6f48842

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AllowSetForegroundWindow
GetClientRect

kernel32

SetHandleCount
VirtualAlloc
CloseHandle
CreateFileA
GetFileType
GetStdHandle
RaiseException
ReadFile
RtlUnwind
SetFilePointer
WriteFile
ExitProcess
GetCommandLineA
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetStartupInfoA
MultiByteToWideChar
WideCharToMultiByte
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetVersionExA
GetProcessHeap
HeapDestroy
HeapCreate
HeapReAlloc
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetEnvironmentStringsW

Sections

.text
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2055655f29765e6b2b94402ee6f48842

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 271KB - Virtual size: 270KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 6KB - Virtual size: 84KB

.rsrc Size: 512B - Virtual size: 480B

.text
Size: 271KB - Virtual size: 270KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 6KB - Virtual size: 84KB

.rsrc
Size: 512B - Virtual size: 480B