040c230140187ca4b60ce03820ac0778_JaffaCakes118

General

Target

040c230140187ca4b60ce03820ac0778_JaffaCakes118
Size

95KB
MD5

040c230140187ca4b60ce03820ac0778
SHA1

1f8f1ffebc71ea63d5acd7f4b4bbd59f43842429
SHA256

7a43375a48792238686b90d0835c39c1e984b20142b9d0a5e33540b906753dab
SHA512

98ec04878bb7d08bd024524d737ec18621ef9a17f77c15cdc6c91f3a7498246078ee9ff368fb78e8d2829f8786f3291bcca358218e9e24562da07fdafd472456
SSDEEP

1536:C/tU/WlWiQLilm9rhkccQ2dKp1gXiG+YTBoqosRigPZ5S2rqiSr4ezNqS6KHhceT:C6/KnlmcQ2dKp1gXKYTagh5SCTSR16gj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
040c230140187ca4b60ce03820ac0778_JaffaCakes118

Files

040c230140187ca4b60ce03820ac0778_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f05b2fdf68ac3253618521e63672e988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Download\test123\2727\Release\2727.pdb

Imports

kernel32

GetCurrentProcessId
GetLastError
GetModuleHandleA
ReadFile
GetSystemTime
CreateFileA
GetModuleFileNameA
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
GetCPInfo
GetOEMCP
GetACP
VirtualQuery
InterlockedExchange
RtlUnwind
ExitProcess
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
LoadLibraryA
GetSystemInfo

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f05b2fdf68ac3253618521e63672e988

Headers

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 1KB