054a3ffd92763445e34c5881d4f1181f_JaffaCakes118

General

Target

054a3ffd92763445e34c5881d4f1181f_JaffaCakes118
Size

417KB
MD5

054a3ffd92763445e34c5881d4f1181f
SHA1

53cf9194007247a4cde529d8a9f331bed6a905d8
SHA256

f5d6eab3caaaea96d85d895225cc1ab92ace02f12388d9de6364ae931f2a00a3
SHA512

054cae50209b1007e73968425b9912f1c85217f830ce5feeba0a0167f58a80a38113118c41416c7b91c6f0862bc3725d6fce6f4d8a4bcaf49b0cc3f8e49a6d64
SSDEEP

6144:aVKG9b02RY4CGfs0YRBYGtVDyFIsRfKMToukiq+HcVeDJJyCMaa:aV/9b04gGfxYRBY2ZyFNyMTUrgDJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
054a3ffd92763445e34c5881d4f1181f_JaffaCakes118

Files

054a3ffd92763445e34c5881d4f1181f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1d09bad95fbeab8eeb3e39c1709388c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetFileType
TlsGetValue
GetDateFormatA
RtlUnwind
LCMapStringA
GetCurrentThread
GetCurrentProcess
InterlockedDecrement
VirtualAlloc
VirtualFree
TlsAlloc
HeapReAlloc
HeapCreate
EnterCriticalSection
GetVersionExA
GetProcessHeap
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
IsValidLocale
ExitProcess
GetTimeFormatA
IsValidCodePage
MultiByteToWideChar
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
InterlockedIncrement
GetOEMCP
SetHandleCount
QueryPerformanceCounter
DeleteCriticalSection
SetUnhandledExceptionFilter
GetACP
VirtualQuery
GetCurrentThreadId
GetLocaleInfoW
HeapAlloc
HeapSize
HeapFree
CompareStringA
WideCharToMultiByte
GetCurrentProcessId
GetCommandLineA
LCMapStringW
IsDebuggerPresent
CopyFileA
SetEnvironmentVariableA
GetLocaleInfoA
GetTimeZoneInformation
LeaveCriticalSection
GetStartupInfoA
Sleep
TlsSetValue
FreeEnvironmentStringsA
GetEnvironmentStrings
GetModuleHandleA
EnumSystemLocalesA
GetStringTypeW
GetCPInfo
CompareStringW
WriteFile
FreeLibrary
FreeEnvironmentStringsW
GetLastError
SetConsoleCtrlHandler
GetProcAddress
GetUserDefaultLCID
HeapDestroy
GetEnvironmentStringsW
TlsFree
InterlockedExchange
SetLastError
TerminateProcess
InitializeCriticalSection

user32

GetTopWindow
GetUserObjectInformationW
EnumPropsExW
CloseWindowStation
EnumDisplaySettingsExW
GetPropW

comdlg32

PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
LoadAlterBitmap
ChooseFontA
ReplaceTextA
ChooseFontW
GetFileTitleW

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1d09bad95fbeab8eeb3e39c1709388c

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

Sections

.text Size: 137KB - Virtual size: 136KB

.data Size: 275KB - Virtual size: 282KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 137KB - Virtual size: 136KB

.data
Size: 275KB - Virtual size: 282KB

.rsrc
Size: 4KB - Virtual size: 3KB