4ae61e7932f6c73411841d398379e844_JaffaCakes118

General

Target

4ae61e7932f6c73411841d398379e844_JaffaCakes118
Size

420KB
MD5

4ae61e7932f6c73411841d398379e844
SHA1

531146b815e4aa422627ed88e5d136d17c74cb1f
SHA256

1ca248d59509da5e7639cee615bc785491fee67db8690cb28db90ab9cdd735a7
SHA512

58b349e43d561176bed2aba966a60ad51f17b0f6c0fc6d05f5ec0a66bcf2331c22fab47932e1c2cccaa0538124d3ed1dc91ffeae056634193960e04894e0a356
SSDEEP

6144:TmRZ14PkOK0UvQ+wsGTSkJkn9vwXjrU5dDecxIdMn4Xkqam3l/joRZBcU5ISJk:SGnGrGTS+04XHU5lOdMnq3VURZlG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ae61e7932f6c73411841d398379e844_JaffaCakes118

Files

4ae61e7932f6c73411841d398379e844_JaffaCakes118
.exe windows:4 windows x86 arch:x86

186899866b9f044df1a96b92854cee0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
SizeofResource
FindResourceA
GetTempPathA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
LockResource
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
ReadFile
SetEndOfFile
HeapSize
GetCPInfo
GetOEMCP
GetStringTypeW
GetCommandLineA
GetLastError
GetFileAttributesA
ExitProcess
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapFree
CloseHandle
WriteFile
GetProcAddress
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetACP
DeleteFileA

user32

DefWindowProcA
LoadIconA
LoadCursorA
GetSystemMetrics
LoadImageA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
PeekMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
MessageBoxA

gdi32

GetStockObject

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 372KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

186899866b9f044df1a96b92854cee0f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 372KB - Virtual size: 370KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 372KB - Virtual size: 370KB