45210bea4ff06557ebc0b8183e62b3c6_JaffaCakes118

General

Target

45210bea4ff06557ebc0b8183e62b3c6_JaffaCakes118
Size

330KB
MD5

45210bea4ff06557ebc0b8183e62b3c6
SHA1

7ad878576b86b4f40b3acf2f75b2adae46e90a4d
SHA256

66fe0483c998b8fefe4c7a00f474ff5f8714aff6204c58d247ae7d6cc708edf6
SHA512

37baf376a98b4265b535287e8c3041c57c9ea0af63b1daaecd172eea165ffef0b96ed9f15c839440e76af4a7d503d23b7e7d32992b647b37414b24037f161b35
SSDEEP

6144:F0K3AcDDyHNxf2fjNpBwx8v3fKBWZezxR68v1P36LIRvBrzQirhSXNyQ:F0K1m+fjjpv3fKKetR68oIRdzjaNf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45210bea4ff06557ebc0b8183e62b3c6_JaffaCakes118

Files

45210bea4ff06557ebc0b8183e62b3c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbf7c4687ee20660dadbd9508bf59f8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
TerminateThread
VirtualFree
VirtualAlloc
Sleep
GetLastError
GlobalFree
LocalAlloc
FreeResource
LoadResource
LockResource
VirtualAllocEx
SizeofResource
VirtualProtect
GetLocalTime
LoadLibraryA
GetModuleHandleW
ResumeThread
GetProcAddress
GetModuleHandleA
lstrcmpiA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
HeapFree
HeapCreate
GetSystemInfo
HeapDestroy
GetFileType
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount

user32

GetDC
PostQuitMessage
KillTimer
MessageBoxA
LoadImageA
LoadIconA
LoadBitmapA
CreateIcon
SetCursor
GetDesktopWindow
LoadCursorW
GetCursorPos
SetTimer
ReleaseDC
IsIconic
GetWindowRect
SetCursorPos

ws2_32

WSACleanup
WSAStartup
WSAAsyncGetHostByAddr

msacm32

acmDriverAddW
acmDriverClose
acmDriverDetailsW

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dbf7c4687ee20660dadbd9508bf59f8a

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

msacm32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 298KB - Virtual size: 298KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 298KB - Virtual size: 298KB