380968b9a6b1317be4e4bdc5b73179f7_JaffaCakes118

General

Target

380968b9a6b1317be4e4bdc5b73179f7_JaffaCakes118
Size

280KB
MD5

380968b9a6b1317be4e4bdc5b73179f7
SHA1

38ae948e928d42921c306b9c8b86ed5d260f4195
SHA256

602d52df9df4630235ed24be0b3487fde95eae4e2f72a8d8f7c27c8d7f365e44
SHA512

d163e7443f69725870a87242bfa921b8e466957f7b776666631c381d0d212a43915e9041b55b3e6c92634e85bb9252608ed808e39f58495a6a261e86b7aa2bdf
SSDEEP

6144:wn8qhG4LrnU9r1l55DSv0RALChbun8jGclFy:wRrU11l55DSvtWhVjNy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
380968b9a6b1317be4e4bdc5b73179f7_JaffaCakes118

Files

380968b9a6b1317be4e4bdc5b73179f7_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

d7b30672054248bd7146a2171748c680

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
lstrcmpiA
GetTickCount
CreateFileA
DeleteFileA
FreeResource
lstrlenA
SetFileTime
LocalFileTimeToFileTime
FindFirstFileA
lstrcatA
GetVersionExA
WriteFile
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
WritePrivateProfileStringA
GetLastError
GetCommandLineA
Sleep
ExitProcess
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
RaiseException
GetStartupInfoA
GetVersion
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
GetStringTypeW

user32

wsprintfA
MessageBoxA
GetInputState

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7b30672054248bd7146a2171748c680

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 220KB - Virtual size: 217KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 220KB - Virtual size: 217KB