8762f2b098a4b918695d971b5cb7db82_JaffaCakes118

General

Target

8762f2b098a4b918695d971b5cb7db82_JaffaCakes118
Size

604KB
MD5

8762f2b098a4b918695d971b5cb7db82
SHA1

360a1dc3087d360e0bf7d7b2176921f50fd790bd
SHA256

72b7316cd71a3f6e040b7ed46dc4c22b063bacb1009cc5e6a3df2c4f24506ff8
SHA512

0bcfcf7f598d6bc3e1c7f9737afb5acade841b4700d0077baed941b62704df5348ba91100dea4a1c1912ad8e3acf661c974bd4e4f70513a444e7c65694ab0d20
SSDEEP

12288:N5O/53+hPzp3sLBB870Gib+QGH1AnZwPGkmsTr2sxWTyc:N5O/9KPzp3sLfoBY+nAZwPQ0241c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8762f2b098a4b918695d971b5cb7db82_JaffaCakes118

Files

8762f2b098a4b918695d971b5cb7db82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

795a91db01592a3f8749faf236b72571

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetTickCount
GetSystemTime
GetProcAddress
LoadLibraryW
FileTimeToSystemTime
GetSystemTimeAsFileTime
IsBadWritePtr
IsBadReadPtr
HeapValidate
RtlUnwind
RaiseException
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
DebugBreak
LoadLibraryA
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
VirtualAlloc
WideCharToMultiByte
SetHandleCount
GetFileType
MultiByteToWideChar
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcessHeap
FreeLibrary
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
IsBadCodePtr
ReadFile
SetStdHandle
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoA
GetLocaleInfoW
GetACP
GetOEMCP
InterlockedExchange
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
CreateFileA
SetEndOfFile

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 328KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

795a91db01592a3f8749faf236b72571

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 204KB - Virtual size: 201KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 328KB - Virtual size: 373KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 204KB - Virtual size: 201KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 328KB - Virtual size: 373KB

.rsrc
Size: 4KB - Virtual size: 16B