1b12c5dcffc25937a7f3079ee5e136d4_JaffaCakes118

General

Target

1b12c5dcffc25937a7f3079ee5e136d4_JaffaCakes118
Size

102KB
MD5

1b12c5dcffc25937a7f3079ee5e136d4
SHA1

9cd479f47b0254ba1078e6aed7d0871548c59cc0
SHA256

617a95b7f3830a345fb8f93616a07f1864737abc56b0af1da367c7b24aad37fa
SHA512

cab5cc6575659f248b4e89eeffcd83635d842fd1800c7251e30ffba8e74f20c04d2b9e8889638c52f4fea788606acfd6007f184f5689f03c65e1fd9c8b6c0403
SSDEEP

1536:gZ2iM7Z9+j4tRuXeUUpPpa7vQ9LRGC72NINt4Q+U1SRq5i0GNLk4Rh5fevmfon:k2pZDnukPpivZuuUeqc0GNLk4Rh5WvTn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b12c5dcffc25937a7f3079ee5e136d4_JaffaCakes118

Files

1b12c5dcffc25937a7f3079ee5e136d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d62ab0d02b70ddf24fea63514ebfbc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
GetPrivateProfileStringW
GetSystemDefaultLangID
GetCurrentDirectoryW
LCMapStringA
GetOEMCP
GetACP
GetModuleHandleA
GetStartupInfoW
GetVersionExA
GetLastError
MultiByteToWideChar
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetStringTypeA
WideCharToMultiByte
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
VirtualProtect
GetSystemInfo
GetLocaleInfoA
GetCPInfo
HeapSize
LCMapStringW

user32

LoadStringW
MessageBoxW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d62ab0d02b70ddf24fea63514ebfbc7

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 78KB - Virtual size: 80KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 78KB - Virtual size: 80KB