7754480cc3b682654a4f308a3e52e85e_JaffaCakes118

General

Target

7754480cc3b682654a4f308a3e52e85e_JaffaCakes118
Size

456KB
MD5

7754480cc3b682654a4f308a3e52e85e
SHA1

0d74e814ee7dbbc89bd1b7a9b89d2227ed3a0334
SHA256

d73edb11c1597d9dc64545f079c230911e5505489e68aa1575153430b273a18d
SHA512

ca63723516ed053f1e88a32f0141697435a468b27cacd2fa86af3ed2ef54cf4ed7e6ab65e5959a5f544a2536a34940aea77abfa3a34db80c0ae6a610ba47ac45
SSDEEP

12288:WrnGiEfgZaBdxhNiucVJGTOdqFL6LZkrcWkbl:knGimSAbqvQF2eQ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7754480cc3b682654a4f308a3e52e85e_JaffaCakes118

Files

7754480cc3b682654a4f308a3e52e85e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3bd8b16ff77af36adb0d001edf1c9687

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MonitorFromWindow
InSendMessage

kernel32

GetCurrentThreadId
HeapSize
VirtualAlloc
WideCharToMultiByte
GetEnvironmentStrings
DeleteFileA
UnmapViewOfFile
RaiseException
FreeEnvironmentStringsA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
DeleteCriticalSection
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
LoadLibraryA
HeapReAlloc
CreateFileA
CloseHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 380KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bd8b16ff77af36adb0d001edf1c9687

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 380KB - Virtual size: 376KB

.data Size: 4KB - Virtual size: 154KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 380KB - Virtual size: 376KB

.data
Size: 4KB - Virtual size: 154KB

.rsrc
Size: 24KB - Virtual size: 20KB