09822546a8a061a2f5a7b2212ab02fa1_JaffaCakes118

General

Target

09822546a8a061a2f5a7b2212ab02fa1_JaffaCakes118
Size

135KB
MD5

09822546a8a061a2f5a7b2212ab02fa1
SHA1

5b72792f8c11650040a5929d7c328b9de0d73452
SHA256

21dbc7774460da54726cc0615bc15912e906aef243ea66c3b15d8dd8961d8d23
SHA512

0187d3104b23a5a0eae348345eb6aefa055f1b172c47b6df7216f35e1cf99d3cf18b4eb998d7172d675bc05aa70da8e2e6f28e949a115bf4fd42dd6efb77d62b
SSDEEP

1536:6zbcbSI94x2RuHhntftGuR75hZY0cF2JTJyKbK3bnhIYDeZzIVzHDn6Jjr+M:YbZLHhntftGuR75s0JoKbqD7eIVzHSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09822546a8a061a2f5a7b2212ab02fa1_JaffaCakes118

Files

09822546a8a061a2f5a7b2212ab02fa1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96a405b1369f7c86f26d3c7263a494cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
LoadLibraryW
CopyFileW
ReadFile
GetModuleFileNameW
ExitProcess
CreateFileW
GetProcAddress
HeapAlloc
HeapFree
GetFileType
GetModuleHandleW
GetProcessHeap
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetVersionExA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
Sleep
GetCPInfo
GetACP

user32

LoadStringW
GetMessageW
PostQuitMessage
ShowWindow
DialogBoxParamW
CreateWindowExW
LoadCursorW
FindWindowW
UpdateWindow
BeginPaint
DefWindowProcW
TranslateMessage
LoadAcceleratorsW
DispatchMessageW
RegisterClassExW
LoadIconW
EndPaint
DestroyWindow
TranslateAcceleratorW
EndDialog

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96a405b1369f7c86f26d3c7263a494cd

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 24KB - Virtual size: 23KB