4bb328aa008a690be4991e1014d94881_JaffaCakes118

General

Target

4bb328aa008a690be4991e1014d94881_JaffaCakes118
Size

33KB
MD5

4bb328aa008a690be4991e1014d94881
SHA1

ddc8c3d6e7d39ed41cdadce2c654a454cf2fffb6
SHA256

ce8a3f0c3293524183f9a1563787225b74d1aee38cc85dbb23171e3ffa7e89bb
SHA512

a9e9b3500a3da8a05237b8169f6644f246d671f2852d8609e112170206ca123c230dd02d580ff3adce215372f01f61c9d038b8910570e2a28276f79dcb1a05df
SSDEEP

768:CTru9qA1/vykPMPgSiVeYSNqmex2lzoY+bagtQT2P5FKc:CTcqyyqKgS2e7w7UlnGb2c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bb328aa008a690be4991e1014d94881_JaffaCakes118

Files

4bb328aa008a690be4991e1014d94881_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63743b4e898f6c763f816ddfe81a7f28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
WriteFile
CloseHandle
GlobalAlloc
GetTickCount
CancelWaitableTimer
ExitProcess
lstrcatA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
GetSystemInfo

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63743b4e898f6c763f816ddfe81a7f28

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 640B

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 640B