46b8c9275a9c438aa08d83a08f327463_JaffaCakes118

General

Target

46b8c9275a9c438aa08d83a08f327463_JaffaCakes118
Size

268KB
MD5

46b8c9275a9c438aa08d83a08f327463
SHA1

3807f809512e6e31950a47cc4aada10ea77b75ec
SHA256

6d7aace562fda7f3e4b8303d87eda0eb37981106a4fd01c3a503ca1a9ce405f3
SHA512

e861228dba1f1d3fbec46006f1d42a8e3d4e3152ae13c0562af667fe429fadc5b38941d7623e4244efda54ea842fe7d24f8bb77f88100034a765f28b7bc26c14
SSDEEP

6144:V3CKOyZ0CHJb9TseghpHx1jHw6IjZlVFCrvThn:V3KyCqXghNx1jHwblVFO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46b8c9275a9c438aa08d83a08f327463_JaffaCakes118

Files

46b8c9275a9c438aa08d83a08f327463_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94be62cefd2824699a20a00bff4e985d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
GetVersionExA
CreateMutexA
CreateEventA
GetModuleHandleA
VirtualAlloc
GetStdHandle
GetProcAddress
IsBadWritePtr
HeapReAlloc
HeapAlloc
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleFileNameA
WriteFile
GetStartupInfoW
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
LoadLibraryA

gdi32

GetTextFaceA
SetTextAlign
SetTextColor
GetTextAlign
TextOutA

shlwapi

StrRStrIW
PathFindNextComponentW
PathFileExistsA

scarddlg

ord2

winscard

SCardFreeMemory

secur32

LsaConnectUntrusted

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 232KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.norman
Size: 4KB - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94be62cefd2824699a20a00bff4e985d

Headers

File Characteristics

Imports

kernel32

gdi32

shlwapi

scarddlg

winscard

secur32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 232KB - Virtual size: 272KB

.norman Size: 4KB - Virtual size: 988B

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 232KB - Virtual size: 272KB

.norman
Size: 4KB - Virtual size: 988B

.rsrc
Size: 4KB - Virtual size: 2KB