42b4579dd7743ef55d420ac99bf0a0cf_JaffaCakes118

General

Target

42b4579dd7743ef55d420ac99bf0a0cf_JaffaCakes118
Size

60KB
MD5

42b4579dd7743ef55d420ac99bf0a0cf
SHA1

970a538de6f9a738dbe4a53e338eb941f697b398
SHA256

754cd97af849d025872105bc28027d1f0bf390cad814b85fb517080427b05d49
SHA512

325133745b59ac153617b3560259e0b59603bb250f1f692c653cd3404d06e4d5b783cb4f99ba2df8e2f7276d76ca179d2999309f65a957dc314b02790f8c9417
SSDEEP

768:Dh2gyy1B6dDDrgSJTXqcDdA+Cmzzw3O8Mtg62LuPxpBZt6s6hzY:dVyysfgSJTNi3CwO8Mtg6CuP7t5v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42b4579dd7743ef55d420ac99bf0a0cf_JaffaCakes118

Files

42b4579dd7743ef55d420ac99bf0a0cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b63fd79278149b390d42d678c13b1cde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Sleep
DeleteFileA
LockResource
LoadResource
GetProcAddress
LoadLibraryA
WaitForSingleObject
ExitProcess
lstrlenA
SetFilePointer
CreateFileA
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
SetStdHandle

Sections

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b63fd79278149b390d42d678c13b1cde

Headers

File Characteristics

Imports

kernel32

Sections

.data Size: 48KB - Virtual size: 47KB

.rsrc Size: 240KB - Virtual size: 239KB

.data
Size: 48KB - Virtual size: 47KB

.rsrc
Size: 240KB - Virtual size: 239KB