09762422575ec9193ba28149e0717017_JaffaCakes118

General

Target

09762422575ec9193ba28149e0717017_JaffaCakes118
Size

116KB
MD5

09762422575ec9193ba28149e0717017
SHA1

6d831ef8d6b987a4db0f66ab000905cc97469743
SHA256

3cf4a84160f5307bba8a3079f61ae5118564893c51b21709258a91cce137146f
SHA512

c3ef2bcabe92100ef636a217660905c412d0cbfd0e6ea33fcca273b4db4a92339ebb3ae54d7315f94e07f8c539ee10b288b916880355d6a62e7bdc6452ce2cca
SSDEEP

1536:kl+lKjHQbAAvJdy5p0lSQE4GbgFevY3wvhWcM8zzLy6wXN4lkeTRhiOmlj9:kg3ymSQtojYapiyJTrElj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09762422575ec9193ba28149e0717017_JaffaCakes118

Files

09762422575ec9193ba28149e0717017_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d403aae49d556904f92ddc82f21a9187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
RtlUnwind
RaiseException
ExitProcess
GetModuleHandleA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
GetCPInfo
HeapFree
HeapAlloc
LCMapStringA
MultiByteToWideChar
GetLastError
LCMapStringW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
SetFilePointer
VirtualProtect
GetSystemInfo
VirtualQuery
InterlockedExchange
GetACP
GetOEMCP
GetLocaleInfoW
SetStdHandle
ReadFile

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d403aae49d556904f92ddc82f21a9187

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 60KB - Virtual size: 56KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 32KB - Virtual size: 34KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 56KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 32KB - Virtual size: 34KB

.rsrc
Size: 4KB - Virtual size: 2KB