1c13c5a8d07e8a6cdae3acbae3e9beb1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1c13c5a8d07e8a6cdae3acbae3e9beb1_JaffaCakes118
Size

196KB
MD5

1c13c5a8d07e8a6cdae3acbae3e9beb1
SHA1

0d3a941d881e27783588da06960182bc4a9c3556
SHA256

a0d808f0aa69bcff89be9b2c0debf1c1a53d72d4850e51cf86745c5b8982c1f5
SHA512

08b2cba0544778acbfa7f7874e61062cb22e68abebf062f0a3b015d30b7a2f76fcc675e42b085c9728509dff43375396d7ac6bab6a26026ce531b013a83f9f8b
SSDEEP

3072:uACv8JwDjlqEtDZ41PApc1EYgm/CJRcgkPOms9To3:vG8sdS1DgmaJeP9s9T+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c13c5a8d07e8a6cdae3acbae3e9beb1_JaffaCakes118

Files

1c13c5a8d07e8a6cdae3acbae3e9beb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b13f9449dca8f77006eb03adfb0b2a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
GetModuleHandleA
DeleteTimerQueue
FileTimeToSystemTime
VirtualAllocEx
GetLastError
VirtualFreeEx
FlushFileBuffers
GetExitCodeThread
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetExitCodeProcess
LocalSize
MultiByteToWideChar
GetStringTypeA
RaiseException
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetSystemInfo

user32

GetDC
GetClientRect
GetWindowRect
GetDesktopWindow
IsWindowUnicode
LoadIconA
IsIconic
GetCursorPos
SetCursorPos

gdi32

CreateHatchBrush

psapi

GetProcessMemoryInfo

winmm

mmioDescend

msvfw32

DrawDibSetPalette
DrawDibEnd

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b13f9449dca8f77006eb03adfb0b2a6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

psapi

winmm

msvfw32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 148KB - Virtual size: 147KB

.tls Size: 4KB - Virtual size: 1024B

.rsrc Size: 4KB - Virtual size: 76KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 148KB - Virtual size: 147KB

.tls
Size: 4KB - Virtual size: 1024B

.rsrc
Size: 4KB - Virtual size: 76KB