5f8dbe32d2a1c1814a1636e6e3c7e629_JaffaCakes118

General

Target

5f8dbe32d2a1c1814a1636e6e3c7e629_JaffaCakes118
Size

1.3MB
MD5

5f8dbe32d2a1c1814a1636e6e3c7e629
SHA1

145e72f1873c3064392abc85485bb48b48465e28
SHA256

5124b48cf1fc035a3df208a37ba6d8dc15bc35e0d4025778220ad862ff2af5b6
SHA512

1a15bb25bba34471eb938d08a1a32c98eae752477fa104a8b7c267c608312e752627c197b2ecb736d70c7da2c5383a596a4a303b85d69ef6153e3a1b3a5b7f47
SSDEEP

24576:575gXyhzIBI7btXVMGaut9Ligf8UcxQ6j49WHhAgJroOXhD44YxN5P7e:5tgPe7hXV/BGgUxxB8mG7FPS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f8dbe32d2a1c1814a1636e6e3c7e629_JaffaCakes118

Files

5f8dbe32d2a1c1814a1636e6e3c7e629_JaffaCakes118
.exe windows:5 windows x86 arch:x86

176ed77ad728b3e9ad828ba56ce256d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
GetTickCount
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
HeapFree
HeapAlloc
GetStartupInfoW
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Sections

Size: - Virtual size: 22.5MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

176ed77ad728b3e9ad828ba56ce256d2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

Size: - Virtual size: 22.5MB

.text Size: 44KB - Virtual size: 43KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 44KB - Virtual size: 43KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB