29762f3ea235405472dac49e0999eae3_JaffaCakes118

General

Target

29762f3ea235405472dac49e0999eae3_JaffaCakes118
Size

116KB
MD5

29762f3ea235405472dac49e0999eae3
SHA1

0273e1792f3f0e1b599c5118f17944f4e649f58d
SHA256

bc0246259d3e23ff942a06c9c245b844bbea682bdf9e9c7a29edc69e35054a29
SHA512

6123f6e028bf95c0642c1d5615ce86c40db7b9982587c8f67632c69165ab1b7c9657277a62cfaa25a1c72dc075669aadb53bbca872447d2fe05b40474d411b52
SSDEEP

1536:7DjOl6uG5YvyvXjhKCXQWhCxWszIhCt22HDitnWQoysAxo50PtoMu/uO7:7Eu54yPwCXtg1nt2R5Wryo6toMvO7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29762f3ea235405472dac49e0999eae3_JaffaCakes118

Files

29762f3ea235405472dac49e0999eae3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c310fdd5ac5ab83b37a53726b0c45dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentThreadId
GetCurrentProcessId
WriteFile
CloseHandle
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
FindResourceA
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
QueryPerformanceCounter
SetFilePointer
TlsAlloc
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings
WideCharToMultiByte
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW

user32

PostQuitMessage
DrawTextA
wsprintfA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
MessageBoxA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DefWindowProcA
DestroyWindow
BeginPaint
GetClientRect
EndPaint

advapi32

RegOpenKeyExA
RegSetValueExA

ole32

CoInitialize

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.BSS
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c310fdd5ac5ab83b37a53726b0c45dd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 24KB - Virtual size: 20KB

.BSS Size: 56KB - Virtual size: 53KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 24KB - Virtual size: 20KB

.BSS
Size: 56KB - Virtual size: 53KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 24KB - Virtual size: 23KB