22c9dee4e2521ffab99ca63ef3ca9288_JaffaCakes118

General

Target

22c9dee4e2521ffab99ca63ef3ca9288_JaffaCakes118
Size

715KB
MD5

22c9dee4e2521ffab99ca63ef3ca9288
SHA1

0ab132526c16134082d73bcb038a3d5f13290cfe
SHA256

403befb57ac8a5bc6cc2a9eb51a4a1664cc5668221b82ce359092c29198ca5e1
SHA512

066af496edffd22378fa7a3b4c7af37cba49001183656c6fcee8a6dbf6cef15b69719d73ff53104191dc318f683654bbad711004a4a0414c248575e3ee351fbf
SSDEEP

12288:BedGmUH4tCYBTUigC4cP3sVMhVf3H4tCYBTUigC4cP3sVMhVfw:Be1GYBTUi50EVZYBTUi50EVI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22c9dee4e2521ffab99ca63ef3ca9288_JaffaCakes118

Files

22c9dee4e2521ffab99ca63ef3ca9288_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81471e63c93db239e981243cabf72608

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindAtomA
FormatMessageA
GetAtomNameA
GetCommandLineA
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalFree
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
WideCharToMultiByte

msvcrt

__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
fputc
free
getenv
localeconv
malloc
memcpy
memset
signal
strlen
wcslen

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

81471e63c93db239e981243cabf72608

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 512B - Virtual size: 80B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 3KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 682KB - Virtual size: 682KB

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 512B - Virtual size: 80B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 3KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 682KB - Virtual size: 682KB