17ea44df18b28d25ece9c6eb1e62d69b_JaffaCakes118

General

Target

17ea44df18b28d25ece9c6eb1e62d69b_JaffaCakes118
Size

253KB
MD5

17ea44df18b28d25ece9c6eb1e62d69b
SHA1

eb27f8d735a4ee1d7aa0e084627166a3c2fcd736
SHA256

fc6fdaf050b2ca27c9c1423ac3abb9789653ced879589b8a4a2777ee34d4604a
SHA512

8b5000de22390d78b209d1560ba1647aba70df7aba7bce7e7dd7bb371b121d749f9cc830504ce2295a8fa4855081db0e43972d7587d1678d0285f03c4412d1e0
SSDEEP

6144:LiFUj6II3+K0LP/GRGV9IUDpQgIvI3f6Ms2nSB0WC:EkXx1plPHSg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17ea44df18b28d25ece9c6eb1e62d69b_JaffaCakes118

Files

17ea44df18b28d25ece9c6eb1e62d69b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfbdc438e25e0c7779dd21634ba203c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
LCMapStringW
MultiByteToWideChar
WriteFile
GetProcAddress
SetEnvironmentVariableA
HeapReAlloc
SetLastError
GetCPInfo
GetVersionExA
GetCurrentProcessId
HeapAlloc
DeleteCriticalSection
GetOEMCP
UnhandledExceptionFilter
GetModuleHandleA
SetHandleCount
GetFullPathNameW
CreateProcessW
TlsSetValue
GetStringTypeA
IsValidCodePage
GetCurrentThread
IsBadWritePtr
TlsAlloc
CompareStringW
GetTimeZoneInformation
GlobalUnfix
LoadLibraryW
ExitProcess
GetTickCount
GetProcAddress
IsValidLocale
HeapFree
GetFileType
GetModuleFileNameA
HeapSize
LoadLibraryA
QueryPerformanceCounter
GetEnvironmentStringsW
VirtualAlloc
GetSystemDefaultLCID
GetCommandLineA
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetLastError
GetStartupInfoA
GetSystemInfo
VirtualFree
ReadConsoleOutputCharacterW
LeaveCriticalSection
GetDateFormatA
GetSystemTimeAsFileTime
GetLocaleInfoA
FreeEnvironmentStringsA
lstrcpy
GetLocaleInfoW
GetStdHandle
EnumSystemLocalesA
WideCharToMultiByte
TlsFree
InitializeCriticalSection
EnterCriticalSection
GetStringTypeW
VirtualProtect
CompareStringA
LCMapStringA
FreeEnvironmentStringsW
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
HeapCreate
GetUserDefaultLCID
GetEnvironmentStrings
TlsGetValue
GetACP

comdlg32

ReplaceTextW
GetOpenFileNameW
GetFileTitleA
ChooseFontW

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfbdc438e25e0c7779dd21634ba203c6

Headers

File Characteristics

Imports

kernel32

comdlg32

Sections

.text Size: 108KB - Virtual size: 107KB

.data Size: 135KB - Virtual size: 165KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 108KB - Virtual size: 107KB

.data
Size: 135KB - Virtual size: 165KB

.rsrc
Size: 9KB - Virtual size: 9KB