3bc677a38119934199b4aa0d2f75d1f0_JaffaCakes118

General

Target

3bc677a38119934199b4aa0d2f75d1f0_JaffaCakes118
Size

294KB
MD5

3bc677a38119934199b4aa0d2f75d1f0
SHA1

bfb2888f61b6f9f891619b75a9b6bc8239a3a770
SHA256

14bc6f2f08a8d902cf615ce422533c110780ddf36679b571167273e4b47295b6
SHA512

214f18a7ab46969e2e6134dca13e31850aec2f1297737bd51959358382a26219899f0af2a70cb4179e1aaeb1a5539ae86c1db483e8238e7fe7137bcdbf88d147
SSDEEP

6144:BS4TYAzd1s3LNW7jbqsDq9vv/d6S808WxvHqzx:BS4T9dQ2vqskvvISP8Ovs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bc677a38119934199b4aa0d2f75d1f0_JaffaCakes118

Files

3bc677a38119934199b4aa0d2f75d1f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e4eec156d0e10b632969eb6c1ca3122

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Download\test123\3838\Release\3838.pdb

Imports

kernel32

GetModuleHandleA
GetSystemTime
GlobalAlloc
GetModuleFileNameA
ExitProcess
CreateThread
GetTickCount
GetLastError
CreateFileMappingA
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
HeapReAlloc
VirtualAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetSystemInfo

user32

LoadStringA
LoadAcceleratorsA
LoadIconA
LoadCursorA
RegisterClassExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
EndPaint
PostQuitMessage
EndDialog
CreateWindowExA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e4eec156d0e10b632969eb6c1ca3122

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 212KB - Virtual size: 210KB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 212KB - Virtual size: 210KB

.rsrc
Size: 48KB - Virtual size: 47KB