14bab87f7278557e306dafea39823822_JaffaCakes118

General

Target

14bab87f7278557e306dafea39823822_JaffaCakes118
Size

50KB
MD5

14bab87f7278557e306dafea39823822
SHA1

f5e702f52107efd291f559ef3aedbf1df50c5281
SHA256

7ebf4d6f28efccadc0fdc3dd5070103c789518b57804fe936427c2d900396f13
SHA512

f43fb02912f8bc4696fba5f7eac235d27bb30b380f674533d15ad14539209e792a223b63a32529a5ae6f1c240b72fa39bc896170ca577a133e40c16aeb026542
SSDEEP

768:kbqFqmLOsJYBUHQ0IDodlJK3Ht/4X89arhiuEVTGnNyGPH8oK+:/FqmyTuGodlJkHt/y80tSTgR8o5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14bab87f7278557e306dafea39823822_JaffaCakes118

Files

14bab87f7278557e306dafea39823822_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5443876002f4e62c69ddfb1b474514fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
SetFileTime
GetFileTime
DeleteFileA
WaitForSingleObject
Sleep
CreateProcessA
OpenProcess
FreeResource
CopyFileA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
FreeLibrary
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
LCMapStringW
LCMapStringA
CreateFileA
WriteFile
CloseHandle
GetCurrentProcessId
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetLastError
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers

user32

wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5443876002f4e62c69ddfb1b474514fb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 60KB

.rsrc Size: 29KB - Virtual size: 28KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 60KB

.rsrc
Size: 29KB - Virtual size: 28KB