452e27fd1e130b6c1df406138f63d773_JaffaCakes118

General

Target

452e27fd1e130b6c1df406138f63d773_JaffaCakes118
Size

72KB
MD5

452e27fd1e130b6c1df406138f63d773
SHA1

6a360a5c2e29228a85785c5723d10b32c990d651
SHA256

fee588db9bfe949b0668764b6995fed8ee86c52a337f3a2615fd7a61d1b217e8
SHA512

ce29dc60b2bf3a25f0c2004d17eaf7d81117e17ddc66a515df991063209988d789390248df0ea155877969ecb20968bffc153fcbf8bade16f9b3f238fe8459ff
SSDEEP

768:IlSuCNa1Z+6xTT3eHPUgkKEcBWTt5FmNj9AAZlUsPgrFSbBoxT/9DI/iDKDAtGq:I+s8kTMcghEcBdmAzhoWoxhDIZDAy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
452e27fd1e130b6c1df406138f63d773_JaffaCakes118

Files

452e27fd1e130b6c1df406138f63d773_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b05411996f22bef400df8fb05f8dcac9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetTimer
KillTimer

kernel32

GetCurrentThreadId
FreeLibrary
GetProcAddress
LoadLibraryA
GetTickCount
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
GetLastError
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
WriteFile
TerminateProcess
GetCurrentProcess
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b05411996f22bef400df8fb05f8dcac9

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 20KB - Virtual size: 36KB

.data Size: 8KB - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 20KB - Virtual size: 36KB

.data
Size: 8KB - Virtual size: 4KB