934fd737e1deb0a9d33c94acabe004ca_JaffaCakes118

General

Target

934fd737e1deb0a9d33c94acabe004ca_JaffaCakes118
Size

1.3MB
MD5

934fd737e1deb0a9d33c94acabe004ca
SHA1

ea5922063b728a094c12ee3858ab4519b64e61a4
SHA256

e9099f3d01aa4cf1c28017e5c71ba81d63e71c4bad5fd4cf541aa852b0f89a1d
SHA512

7520c5c56cad1facfe914efb4edb942130fa39d4e48098345fd0c7d4b30af93f1b8e8a85c7bf4d7d6f8e5cba1a98eca0b4662a81a48de524ca26eba6973e2250
SSDEEP

24576:5cfrc7cpV6pkAq4JQSAMpoGtyBCwBCuGPBn4ra56q9D7hJZZ:Sz1pEpkAq0AWKBWJb6q9DnZZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
934fd737e1deb0a9d33c94acabe004ca_JaffaCakes118

Files

934fd737e1deb0a9d33c94acabe004ca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

176ed77ad728b3e9ad828ba56ce256d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
GetTickCount
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
HeapFree
HeapAlloc
GetStartupInfoW
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Sections

Size: - Virtual size: 22.5MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

176ed77ad728b3e9ad828ba56ce256d2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

Size: - Virtual size: 22.5MB

.text Size: 44KB - Virtual size: 43KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 44KB - Virtual size: 43KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB