29cf5c34175b8c1bdcfcef32ee6c28dc_JaffaCakes118

General

Target

29cf5c34175b8c1bdcfcef32ee6c28dc_JaffaCakes118
Size

185KB
MD5

29cf5c34175b8c1bdcfcef32ee6c28dc
SHA1

0c5f41e4c326a27e9ef97b0f524d70b08b24b582
SHA256

73185b827a666515a9e684cb3f1ebf12de6a5726eaa0c8ca21f01f5afd916701
SHA512

703d9d514b1bc505a8bfd0447ef01d90ff9074a8564fd266bbd5165852dde7282b52a26b64a0fe69b8dfb0ef94a2122675e162247079d8cb29ef880c111f2270
SSDEEP

3072:s1D9qCCeY6ln4MKC7iRWUsmaDyG6Q5Xu9K+V9Q2uBTy2Im2mODZ6G6PPfOzRzb2x:nC0I4MN0Wt6QFIKqXuKm2/1q6zb2+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29cf5c34175b8c1bdcfcef32ee6c28dc_JaffaCakes118

Files

29cf5c34175b8c1bdcfcef32ee6c28dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83a97d790b706612e4d2d2ade691bde0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTickCount
WriteProcessMemory
TlsSetValue
SetThreadContext
GetThreadContext
VirtualAlloc
GetProcAddress
LoadLibraryA
GetLastError
lstrcpyA
GetModuleFileNameW
GetSystemTime
lstrcatA
GetWindowsDirectoryA
TlsGetValue
TlsAlloc
CreateThread
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
GetSystemInfo
MultiByteToWideChar
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetStdHandle
HeapSize
LCMapStringA

user32

GetWindowRect
GetWindowRgn
KillTimer

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83a97d790b706612e4d2d2ade691bde0

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 55KB

.rsrc Size: 4KB - Virtual size: 680B

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 55KB

.rsrc
Size: 4KB - Virtual size: 680B