391ae29bd8b3d971215d22f8dc3321cb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

391ae29bd8b3d971215d22f8dc3321cb_JaffaCakes118
Size

91KB
MD5

391ae29bd8b3d971215d22f8dc3321cb
SHA1

aaf73e6d7dc582e0e427efa0f42fed19e05444e1
SHA256

44868ae537bd9c6aa1236a0b90c41746361784f1a63dbcc2aec7a4324a856a1f
SHA512

71bdec605b6a6d934dd01dd3080ac1d4a69798659fb11146048be32272ca3c613a7d8b3e673217940d0176048d35c37c08f1b3957d70f980bce76f36ab6cce88
SSDEEP

768:tSzR17rmsJwFFUv/F9aPeoiP9Q6l/MxJ5tc55:tS37S8tbPJ/g5tc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
391ae29bd8b3d971215d22f8dc3321cb_JaffaCakes118

Files

391ae29bd8b3d971215d22f8dc3321cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b44e1e3bd6b7270888e4fc47457a1161

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
MultiByteToWideChar
GetWindowsDirectoryA
IsBadWritePtr
GetModuleHandleA
GetFileAttributesExA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 24KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 22KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.9kcyj
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b44e1e3bd6b7270888e4fc47457a1161

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 24KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 4KB

.sdata Size: 22KB - Virtual size: 92KB

.reloc Size: - Virtual size: 4KB

.9kcyj Size: - Virtual size: 52KB

.data Size: 4KB - Virtual size: 144KB

.idata Size: 98KB - Virtual size: 100KB

.rsrc Size: 7KB - Virtual size: 8KB

.text
Size: 24KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 4KB

.sdata
Size: 22KB - Virtual size: 92KB

.reloc
Size: - Virtual size: 4KB

.9kcyj
Size: - Virtual size: 52KB

.data
Size: 4KB - Virtual size: 144KB

.idata
Size: 98KB - Virtual size: 100KB

.rsrc
Size: 7KB - Virtual size: 8KB