173d4b5382d3f4ced2dca07e00d7df77_JaffaCakes118

General

Target

173d4b5382d3f4ced2dca07e00d7df77_JaffaCakes118
Size

805KB
MD5

173d4b5382d3f4ced2dca07e00d7df77
SHA1

3e58caad694ac56e6a831c00cd78986d3eb16131
SHA256

2c4b98dd588bb6e4208a6bb8e40a128cc9446515ed2cdae68eb5ce20941e65a1
SHA512

607a6b8dea69627f00c3fa436e46697fb1c1a543a5da7f9fff01e852060bee52252a2d175b5e2b31a4869bb508fc7c0f7f1153bcbdc9852c3fc245bc3c078fc9
SSDEEP

24576:bPAIHh5RGTehzfTer69wxc46aFgGDEAf67INBQLDc:bPAaGTexTer6EPHFgOH677c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173d4b5382d3f4ced2dca07e00d7df77_JaffaCakes118

Files

173d4b5382d3f4ced2dca07e00d7df77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cca5b7993addcb7ec9a766735f971c72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
IsWindow
EndDialog
GetDC
SetWindowTextA
GetDesktopWindow
DestroyWindow
GetClientRect

kernel32

FindNextFileA
GetEnvironmentVariableA
GetStdHandle
LCMapStringW
FileTimeToSystemTime
lstrlenA
GetModuleFileNameW
WaitForSingleObject
LockResource
GetModuleHandleA
GetCurrentThreadId
GetLastError
GetCommandLineA
GetTickCount
GetCurrentProcessId
GetVersion
ExitProcess
VirtualAlloc
LeaveCriticalSection
GetVersionExW
InterlockedIncrement
HeapAlloc
CreateFileA
SetEndOfFile
GetFileType
Sleep
TlsGetValue
FindClose
CreateEventA
VirtualFree
FindResourceW
LoadResource
InitializeCriticalSection
GetTimeZoneInformation
GetConsoleCP
TerminateProcess
LocalFree
GetOEMCP
GetModuleHandleW
GetStringTypeW
HeapReAlloc
GetACP
CloseHandle
GetCurrentProcess
ReadFile
SetFilePointer
TlsFree
GetFileAttributesA
WideCharToMultiByte
RaiseException
SetStdHandle
GetProcessHeap
QueryPerformanceCounter
GlobalLock
ExpandEnvironmentStringsA
HeapSize
MultiByteToWideChar
CreateThread
IsValidCodePage
GetCommandLineW
UnhandledExceptionFilter
GetFileSize
GetLocaleInfoA
FindNextFileW
GetStartupInfoA
GetProcAddress
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteFileA
LoadLibraryA
GetVersionExA
FlushFileBuffers
HeapDestroy
LCMapStringA
FreeLibrary

Sections

.text
Size: 759KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cca5b7993addcb7ec9a766735f971c72

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 759KB - Virtual size: 1.1MB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 22KB - Virtual size: 22KB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 759KB - Virtual size: 1.1MB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 18KB - Virtual size: 17KB