50ee14bcb65569b880134564fd528841_JaffaCakes118

General

Target

50ee14bcb65569b880134564fd528841_JaffaCakes118
Size

287KB
MD5

50ee14bcb65569b880134564fd528841
SHA1

1e546bbcac8829e495eb4fb19fba33c79cd02e15
SHA256

8ccbb960979fc18d82b88f8813ae70393c4d91e7548b5b185c98ad461cb1d341
SHA512

d1b945d2ab3c882d1b79b406a42ca5915eaa22af9316f6536a937266c61f5fecb80352e980643cb0cbeb6dcf48ec450e94594b26780704abc57ab783d7a7bf9e
SSDEEP

3072:tKR/53u0qdvR0UKulIz6YtIvIoRDqqlaYh1qBFAPaFpxSg/BdS5J/8tfbIJcj4j4:Q3THUm6SKIyqvYh4BSPcI5JRuyQNAOt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50ee14bcb65569b880134564fd528841_JaffaCakes118

Files

50ee14bcb65569b880134564fd528841_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cae070d8c0edf88887941f94c41bc25e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetForegroundWindow
LockSetForegroundWindow
AnimateWindow

kernel32

TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
GetProcAddress
DeleteCriticalSection
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
TerminateProcess
GetStartupInfoA
GetProcessHeap
GetVersionExA
HeapFree
GetCommandLineA
HeapAlloc
HeapReAlloc
GetLastError
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetCurrentThreadId
GetACP
GetOEMCP
Sleep
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
InitializeCriticalSection
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
FlushFileBuffers
ReadFile
RaiseException
GetLocaleInfoW
HeapSize
CreateFileA
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentProcess

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cae070d8c0edf88887941f94c41bc25e

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 97KB - Virtual size: 97KB

.rdata Size: 181KB - Virtual size: 180KB

.data Size: 6KB - Virtual size: 100KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 97KB - Virtual size: 97KB

.rdata
Size: 181KB - Virtual size: 180KB

.data
Size: 6KB - Virtual size: 100KB

.rsrc
Size: 1KB - Virtual size: 1KB