82941c02e7c0e556e538aaef43253a20_JaffaCakes118

General

Target

82941c02e7c0e556e538aaef43253a20_JaffaCakes118
Size

861KB
MD5

82941c02e7c0e556e538aaef43253a20
SHA1

a2ad5f09c68e3c303131d3171f0584f625c8b168
SHA256

2acddeae7b33398ddabfddf1ce981590b57b0ef41c60ddfd6e29fe4dd020874c
SHA512

a106181b3d87e2a1fb849c091e30bb46c1cb801ec35788386634b48f5b724b3d2992d0502f88a1e2596ad75abfd935c232d5396f4eb6062f44b1d845578a9a20
SSDEEP

12288:uZa5eJ3ZsYu1qO4YMh0NfsAQ9XB6U+GadEGug23CIeTBBWENaj0OOlMnNsd:ga5MAMDtwfsAQ9z+Gad/nIeNBWtj0OW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82941c02e7c0e556e538aaef43253a20_JaffaCakes118

Files

82941c02e7c0e556e538aaef43253a20_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3fd33252d11bb05878072641343091ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit

kernel32

WriteFile
GetStartupInfoW
GetStringTypeW
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
IsValidCodePage
CreateDirectoryW
FindResourceExW
GetModuleHandleW
LoadLibraryExW
CreateEventW
TlsAlloc
SystemTimeToFileTime
GetSystemInfo
GetLocalTime
GetProcAddress
GlobalAlloc
VirtualAlloc
GetCurrentProcessId
ExitProcess
GetCurrentThreadId
GetLastError
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetHandleCount
GetStdHandle
GetSystemTime
CloseHandle

psapi

GetModuleFileNameExW
GetMappedFileNameW
GetModuleBaseNameW

shell32

DragFinish
ShellExecuteW
ExtractIconExW
Shell_NotifyIconW
SHGetSpecialFolderPathW

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mi4d
Size: 802KB - Virtual size: 801KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fd33252d11bb05878072641343091ff

Headers

File Characteristics

Imports

msvcrt

kernel32

psapi

shell32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 7.0MB

.mi4d Size: 802KB - Virtual size: 801KB

.rsrc Size: 12KB - Virtual size: 13KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 7.0MB

.mi4d
Size: 802KB - Virtual size: 801KB

.rsrc
Size: 12KB - Virtual size: 13KB