29175116212a6dd408b386b34cf622ff_JaffaCakes118

General

Target

29175116212a6dd408b386b34cf622ff_JaffaCakes118
Size

68KB
MD5

29175116212a6dd408b386b34cf622ff
SHA1

6e1b7ca691f0e33636924fb5d66e2f6cf6d79d52
SHA256

28ad71d8224bb86088bb35e3ed336301682cbb1a35dbfc092f1f550f2f57e11e
SHA512

ea89f7c6412265660ed8a8f840130dbc0c818272ebc37418d258bfe09cf79441b28c8177cd214f26bfa6937a3c046f9debb5e56937c6f2f681bdc1bc2c29f6d8
SSDEEP

1536:oDUHvbg1M6+73rn3P9jV2l3Wo7jBAhQBV9yLC7n:oDovbM+7rFw5Wo7mhQb9yLCz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29175116212a6dd408b386b34cf622ff_JaffaCakes118

Files

29175116212a6dd408b386b34cf622ff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e7f19ec5c0f214a76484af5d120d7f4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mi_exe_stub.pdb

Imports

kernel32

ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
HeapAlloc
GetProcessHeap
RtlUnwind
CreateFileA
FindResourceA
lstrcmpA
LoadResource
WriteFile
FindResourceExA
WideCharToMultiByte
SizeofResource
RaiseException
CreateDirectoryA
InterlockedExchange
GetLastError
SetLastError
RemoveDirectoryA
GetTempFileNameA
LockResource
GetModuleFileNameA
GetVersionExA
CloseHandle
GetTempPathA
DeleteFileA
MapViewOfFile
UnmapViewOfFile
VirtualQuery
CreateFileMappingA
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
SetFilePointer
ReadFile
GetACP
GetLocaleInfoA
GetThreadLocale
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapFree
HeapSize

shlwapi

PathQuoteSpacesA

ole32

CoUninitialize
CoInitializeEx

user32

UnregisterClassA
CharNextA
wvsprintfA
CharLowerBuffA
MessageBoxA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7f19ec5c0f214a76484af5d120d7f4c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

shlwapi

ole32

user32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 484B

.rsrc Size: 459KB - Virtual size: 459KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 484B

.rsrc
Size: 459KB - Virtual size: 459KB