389be2da5015e17e95f150dc637f1528_JaffaCakes118

General

Target

389be2da5015e17e95f150dc637f1528_JaffaCakes118
Size

156KB
MD5

389be2da5015e17e95f150dc637f1528
SHA1

403c2cff9dc028014f854d10a21677cd4a2d6fa3
SHA256

8a2226c8b39b6bd3f1255b9fd07525b8fed0621e3c9c274b14880e5315b3bb56
SHA512

12cf701e0bb7602660a54c0ce321615169bb8f1630169dca7a7630f98e83b6a5ea70caeb5e9bbdb12ca5e35002d27fdfc1ada534db8c010232f642c705dc8fe6
SSDEEP

3072:DMfb0aotAg4F5L+2X94b2JsAslj2mTIMU:DSb/dLLfmb2ADU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
389be2da5015e17e95f150dc637f1528_JaffaCakes118

Files

389be2da5015e17e95f150dc637f1528_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c22c4da033c109324d6dac98e5fa586

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetModuleHandleW
GetProcessHeap
GlobalAlloc
ReadFile
GetModuleFileNameW
CreateFileW
ExitProcess
HeapAlloc
HeapSize
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
GetVersionExA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep

user32

DialogBoxParamW
SendMessageW
LoadCursorW
UpdateWindow
BeginPaint
DefWindowProcW
TranslateMessage
DispatchMessageW
LoadAcceleratorsW
RegisterClassExW
LoadIconW
EndDialog
LoadStringW
EndPaint
DestroyWindow
TranslateAcceleratorW
ShowWindow
GetMessageW
PostQuitMessage
CreateWindowExW

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c22c4da033c109324d6dac98e5fa586

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 24KB - Virtual size: 23KB