a3ac5bcb38dd7ffb79d386796ed78097_JaffaCakes118

General

Target

a3ac5bcb38dd7ffb79d386796ed78097_JaffaCakes118
Size

6.0MB
MD5

a3ac5bcb38dd7ffb79d386796ed78097
SHA1

045fe8925881e1ad8aaf6b1fd16f575ee44214e3
SHA256

4bc8c583ed967ddb6b364d71750dc7492b71570cccd90a04ce1e46005c5652c2
SHA512

3c230cab266c6328f35fdd3815022cb4b63db3c6b5e35b0f2d8c86599ff6a4560b0073c68061df977509db74a7f3dff2d3bae6f2b0e069670f7fbeba87a16c8d
SSDEEP

98304:5FqLizUGc7+ZgJgqhq47+3oFWfc2HYY+Ojbadi7dldSQN16vLCkLVr:PzUb4Zqhqc+3NFT2kdldt16D9LB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3ac5bcb38dd7ffb79d386796ed78097_JaffaCakes118

Files

a3ac5bcb38dd7ffb79d386796ed78097_JaffaCakes118
.exe windows:5 windows x86 arch:x86

58435290dcc75b122641951f08ff6c21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

wtsapi32

WTSSendMessageW

user32

GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

Sections

.flat
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx0
Size: - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.upx1
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58435290dcc75b122641951f08ff6c21

Headers

File Characteristics

Imports

kernel32

wtsapi32

user32

Sections

.flat Size: - Virtual size: 3KB

.bss Size: - Virtual size: 1.8MB

.data Size: - Virtual size: 1.8MB

.text Size: - Virtual size: 13KB

.idata Size: - Virtual size: 136B

.upx0 Size: - Virtual size: 2.8MB

.upx1 Size: 6.0MB - Virtual size: 6.0MB

.flat
Size: - Virtual size: 3KB

.bss
Size: - Virtual size: 1.8MB

.data
Size: - Virtual size: 1.8MB

.text
Size: - Virtual size: 13KB

.idata
Size: - Virtual size: 136B

.upx0
Size: - Virtual size: 2.8MB

.upx1
Size: 6.0MB - Virtual size: 6.0MB