2752ce2e10300b8e33a7b65f0824071a_JaffaCakes118

General

Target

2752ce2e10300b8e33a7b65f0824071a_JaffaCakes118
Size

198KB
MD5

2752ce2e10300b8e33a7b65f0824071a
SHA1

94871a7451e942eb80ad4d9b96a4c8e5ab9552f7
SHA256

dbfb6bff8d3611ef4dbe41ab12fbfb88254b08c7fa1dc9105f36b77c36dbeb94
SHA512

fdc8645051c045e468b4c8b56d11225dc2f5b178691d57531cc9b6dbdfbcfa5381b4e7ed3852471ff85fd6aa9e5916acc490e3a5bb1897d2492fc6aef638e069
SSDEEP

6144:6auG8i+KMolNZmXqvIMo0tOxHD8uriS3kULhoy:6aufKdxmXqvLtxuriS3kUdo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2752ce2e10300b8e33a7b65f0824071a_JaffaCakes118

Files

2752ce2e10300b8e33a7b65f0824071a_JaffaCakes118
.exe windows:6 windows x86 arch:x86

4805cd2b0135ca45c992af8d8d809b83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

SetStdHandle
WriteConsoleW
GetLastError
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
CreateFileW
RtlUnwind
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
SetConsoleCtrlHandler
GetStdHandle
WriteFile
GetModuleFileNameW
DecodePointer
GetFileType
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
CloseHandle

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4805cd2b0135ca45c992af8d8d809b83

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 144KB - Virtual size: 144KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 3KB - Virtual size: 42KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 144KB - Virtual size: 144KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 3KB - Virtual size: 42KB

.reloc
Size: 9KB - Virtual size: 9KB