403eab27c58c3c348d8b559b257a5030_JaffaCakes118

General

Target

403eab27c58c3c348d8b559b257a5030_JaffaCakes118
Size

3.4MB
MD5

403eab27c58c3c348d8b559b257a5030
SHA1

307c1c8756ca37ff8cda6b35649fd945880eec96
SHA256

73cfe313ef8f6d175e174ba861d7e25f8105dd92b12fa30912b173068efb8398
SHA512

7672c74784f67468cf39e241e430e93aac886f49290c29fa72e4dc72901e78c4ff77919e8a75b73c81ee92dda1d2f7a1cb4f6b967c41f8cb1afe0c7090cb648e
SSDEEP

98304:50B9PyOVThfWi8KAVtABYKQdxdZN1StF:uRnTBWi1sABYhXo/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
403eab27c58c3c348d8b559b257a5030_JaffaCakes118

Files

403eab27c58c3c348d8b559b257a5030_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0027af1d0c4a27eeeff85cfb983fdb53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleHandleW
GetProcAddress
CloseHandle
GetTickCount
MultiByteToWideChar
SetLastError
HeapAlloc
LeaveCriticalSection
CreateFileW
ExitProcess
GetStartupInfoW
RaiseException
SetEvent
GetACP
GetFileType
InitializeCriticalSection
HeapReAlloc
GetConsoleMode
TlsSetValue
CreateEventW
HeapSetInformation
SetFilePointer
GetFileAttributesW
GetStringTypeW
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
SetStdHandle
FreeEnvironmentStringsW
IsProcessorFeaturePresent
GetConsoleCP
LocalAlloc
SetEndOfFile
ResetEvent
GetVersionExW
OutputDebugStringW
VirtualFree
GetLocaleInfoW
UnmapViewOfFile

user32

ShowWindow
DestroyWindow
ReleaseDC
DefWindowProcW
SetWindowLongW
GetWindowLongW
GetSystemMetrics
GetDC
SetWindowPos
EnableWindow
IsWindow
EndDialog
SetWindowTextW
SetTimer
SetFocus
GetSysColor
BeginPaint
ScreenToClient
SetCursor
KillTimer
EnableMenuItem
UpdateWindow
SystemParametersInfoW
CharUpperW
ClientToScreen

Sections

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0027af1d0c4a27eeeff85cfb983fdb53

Headers

File Characteristics

Imports

kernel32

user32

Sections

.idata Size: 2KB - Virtual size: 1KB

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.data Size: - Virtual size: 612KB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: - Virtual size: 612KB