4cdadf12668d99235fb6e3d8e8b1625c_JaffaCakes118

General

Target

4cdadf12668d99235fb6e3d8e8b1625c_JaffaCakes118
Size

59KB
MD5

4cdadf12668d99235fb6e3d8e8b1625c
SHA1

2957e7546ab9ff82790f8a52eceab4db8023f422
SHA256

ceb40d3600b149a2f64c20928d6048daaea200f21c9b6fb7d0a8026c6bf3fedb
SHA512

d322314e1ae0518b7adb47b9f8baff82b32ea358f079c694004640cd360f3dfb851dc4574dd6949c1f3c390e909bd44d048ecf2c7983723ca4d244e1317e7a14
SSDEEP

768:eFDrIQIuqyyCo3FQ1uCfl5lyk5t9ZPXgPaalxh6EUB/8g6LKFcl+C:eFDrIzuqYTuCdWkvrElxhO/JxtC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cdadf12668d99235fb6e3d8e8b1625c_JaffaCakes118

Files

4cdadf12668d99235fb6e3d8e8b1625c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4308e9858a554f972b727429a1500dc5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
GetModuleFileNameA
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
GetProcAddress
GetModuleHandleA
VirtualProtectEx
VirtualAlloc
SetFileAttributesA
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
RaiseException
GetLastError
ReadFile
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
CloseHandle
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
CreateFileA
GetACP
GetOEMCP
GetCPInfo
IsBadCodePtr
SetEndOfFile
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4308e9858a554f972b727429a1500dc5

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 8KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 8KB