31c9146f67bce60ebc7d6cd3cd99393d_JaffaCakes118

General

Target

31c9146f67bce60ebc7d6cd3cd99393d_JaffaCakes118
Size

834KB
MD5

31c9146f67bce60ebc7d6cd3cd99393d
SHA1

3a5c1a06267fb3fdea79e956cfe216b6ec8857d8
SHA256

a18dcd7334042de5e95f431c5980857239d6c0824b8dabc28e934431dec7ec86
SHA512

81f06be1ef4dfaba73c86c1ef7cd0750350406a8abb9cd6663b2dc2dc2970fcb8b29244c1fd6a6e257fa8ae650ac63746266554ecb2a2b76ce6033ce4bc7c7b2
SSDEEP

24576:w747b1PCxvB+cJlPm4szwxL8XBcv/3lNNtHk7:w748hBFQ4GwBku/3lNNt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31c9146f67bce60ebc7d6cd3cd99393d_JaffaCakes118

Files

31c9146f67bce60ebc7d6cd3cd99393d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3af4afb1fba0ec565fffebfe7e809eac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetCommandLineA
GetCurrentThread
GetCurrentThreadId
GetTickCount
GetCurrentProcessId
GetModuleHandleA
GetLastError
ExitProcess
HeapAlloc
GetProcessHeap
LeaveCriticalSection
SetLastError
VirtualAlloc
CreateFileA
SetEndOfFile
GetFileType
InterlockedDecrement
GetEnvironmentStringsW
CreateEventA
HeapCreate
InitializeCriticalSection
LocalFree
GetExitCodeProcess
GetStringTypeW
GlobalLock
FindClose
GetSystemTimeAsFileTime
CloseHandle
InterlockedIncrement
WriteFile
InterlockedExchange
ReadFile
CreateThread
FormatMessageA
GetProcAddress
HeapSize
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
WideCharToMultiByte
GetCommandLineW
LockResource
SetConsoleCtrlHandler
GetCurrentProcess
DeleteCriticalSection
HeapDestroy
TlsSetValue
QueryPerformanceCounter
GetOEMCP
FileTimeToSystemTime
LoadResource
LCMapStringW
GetStdHandle
HeapFree

user32

SetCursor
EndPaint
GetSysColor
UpdateWindow
DispatchMessageA
GetWindowRect
ScreenToClient
GetMessageA
SetFocus

Sections

.text
Size: 800KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3af4afb1fba0ec565fffebfe7e809eac

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 800KB - Virtual size: 1.1MB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 11KB - Virtual size: 10KB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 800KB - Virtual size: 1.1MB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 18KB - Virtual size: 17KB