0b805209cbec70c223a560caf05feae0_JaffaCakes118

General

Target

0b805209cbec70c223a560caf05feae0_JaffaCakes118
Size

43KB
MD5

0b805209cbec70c223a560caf05feae0
SHA1

8bd96fb4420d9ceddc393e7c49c0b1a2dc5d5746
SHA256

d8a34a86bd9aec7ac65ab16c3bdb53eda492bc497827bf6cdd24963b688f6d38
SHA512

4c14b3ef888af7316f8dd1b9ec8a0084d71915558c31866010de0c0a9c8f26f331ff1212deb4eadaf8d06ff434b36dac8d7613fae81910282a34d1a8704e00cd
SSDEEP

768:NLLmOpP5EEbMK8CydTKdKKwwEmrVsDxmZO:fpP5/bMKIKdprV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b805209cbec70c223a560caf05feae0_JaffaCakes118

Files

0b805209cbec70c223a560caf05feae0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e02ac073d38b80a07ac8cf24518b6ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

TlsSetValue
Sleep
GetLastError
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
RemoveDirectoryA
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5e02ac073d38b80a07ac8cf24518b6ca

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 10KB - Virtual size: 15KB

.rsrc Size: 2KB - Virtual size: 1KB

.rmnet Size: 11KB - Virtual size: 12KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 10KB - Virtual size: 15KB

.rsrc
Size: 2KB - Virtual size: 1KB

.rmnet
Size: 11KB - Virtual size: 12KB