6819ce09b270a28e08a5590b948e16b4_JaffaCakes118

General

Target

6819ce09b270a28e08a5590b948e16b4_JaffaCakes118
Size

324KB
MD5

6819ce09b270a28e08a5590b948e16b4
SHA1

92b39821d7a830ce84869cd7bee27b21e1018f01
SHA256

505c40ffdc403b89f93a184d911fd460773f5d8aa6a1031df6495e36034f66ad
SHA512

9a087248e7e92a5ca25a369c15b658d3307e76f2c68e9605c61b7d28698c1969b8a8114b0ac7b880f856928362b05d10a77e3742f02b56218b3c8a9a7533b9f0
SSDEEP

6144:zdbZ0IeJxHwJfZHcDK0PDLygCexEyqRKxRVwX0Fkukez5il2+d:zjFe7wlOK0PyqEysowl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6819ce09b270a28e08a5590b948e16b4_JaffaCakes118

Files

6819ce09b270a28e08a5590b948e16b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b919e6a9511982ee726b72ca6460ddb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
LoadStringW

kernel32

VirtualQuery
GetACP
VirtualProtect
GetStringTypeW
GetOEMCP
LoadLibraryA
SetStdHandle
ReadFile
GetLocaleInfoW
GetSystemInfo
TlsFree
GetStringTypeA
IsValidCodePage
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
GetCPInfo
TlsAlloc
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
GetProcAddress
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
CloseHandle
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b919e6a9511982ee726b72ca6460ddb3

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 240KB - Virtual size: 237KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 240KB - Virtual size: 237KB