24ec1c07838cff677a7fbbde1de084ce_JaffaCakes118

General

Target

24ec1c07838cff677a7fbbde1de084ce_JaffaCakes118
Size

323KB
MD5

24ec1c07838cff677a7fbbde1de084ce
SHA1

600f3d83c676e6d6ffd05bc96ebc8f1ebe835725
SHA256

63f34ee653b416df6ca318356ea8952b713539dafb72aaa44bffe88725b75613
SHA512

f3e0e97d0ceacb120ff6e74d760e1028f6293d6af48e3fa196f7ab78ff18e9b05b8062d40264754b7ff1ad4691a77ff77ce2bb40634c7fd7a6d53a4cceeeacbf
SSDEEP

6144:n1gSa7gBFXY2ZRrcdI667OMZWJOIj/aqIzu92gYYf:1g/7gLI2ZRJjfIRbaqI6ggX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24ec1c07838cff677a7fbbde1de084ce_JaffaCakes118

Files

24ec1c07838cff677a7fbbde1de084ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e4c1a2e35d4f13922fcdc39bb65abb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
CloseHandle
ReadFile
WriteFile
VirtualAlloc
CreateFileA
GetLastError
OpenMutexA
CreateMutexA
ResumeThread
CreateThread
Sleep
GetProcAddress
GetModuleHandleA
ExitProcess
GlobalAlloc
SuspendThread
OpenEventA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
RtlUnwind
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
VirtualQuery

user32

GetDesktopWindow
GetCursorPos
SetTimer
GetDC
IsIconic
SetCursor
KillTimer
PostQuitMessage
ReleaseDC
LoadCursorA

msvfw32

DrawDibTime

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 621KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e4c1a2e35d4f13922fcdc39bb65abb4

Headers

File Characteristics

Imports

kernel32

user32

msvfw32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 297KB - Virtual size: 621KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 297KB - Virtual size: 621KB