77758853dfa9d776d5df15c2a8dfb458_JaffaCakes118

General

Target

77758853dfa9d776d5df15c2a8dfb458_JaffaCakes118
Size

4.0MB
MD5

77758853dfa9d776d5df15c2a8dfb458
SHA1

78fa7038800cdef19f8a3ab3e37a0bd05bbfbafa
SHA256

370860c37571d652ce4569e135781655c031a1064d22d1aabd24d26966d370bc
SHA512

63197740a68e515181a574c74339f954e02315dd49d762a8a9eb45f519378ec34809d338a38d91b76899c613562ccb54aa6865bed144c8fa5518d5e5fd353dfd
SSDEEP

24576:cTLc3XpBkJpmWdtne+zWJo4KPfE/bLy48LGDssf1m+f9P+Ns9hvT:UGWNcOmlT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77758853dfa9d776d5df15c2a8dfb458_JaffaCakes118

Files

77758853dfa9d776d5df15c2a8dfb458_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f11cfa0d5d523669bebd2af6823a14ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetScrollInfo
SetCursor
LockWindowUpdate
GetDlgItemTextW
UnregisterClassW

kernel32

HeapDestroy
VirtualAllocEx
GetLastError
SetHandleCount
GetFileType
CreateFileW
IsValidCodePage
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.7MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nlan
Size: 518KB - Virtual size: 518KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.60ne7h
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f11cfa0d5d523669bebd2af6823a14ec

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 61KB - Virtual size: 61KB

.data Size: 1.7MB - Virtual size: 8.7MB

.idata Size: 2KB - Virtual size: 1KB

.nlan Size: 518KB - Virtual size: 518KB

.60ne7h Size: 1.7MB - Virtual size: 1.7MB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 61KB - Virtual size: 61KB

.data
Size: 1.7MB - Virtual size: 8.7MB

.idata
Size: 2KB - Virtual size: 1KB

.nlan
Size: 518KB - Virtual size: 518KB

.60ne7h
Size: 1.7MB - Virtual size: 1.7MB

.rsrc
Size: 8KB - Virtual size: 8KB