5b27bdcee37e589701f81f99fab84be4_JaffaCakes118

General

Target

5b27bdcee37e589701f81f99fab84be4_JaffaCakes118
Size

273KB
MD5

5b27bdcee37e589701f81f99fab84be4
SHA1

a9d859f605c5a76e5b879cff51529a29720758c9
SHA256

5f84b8b48aff3f08b2f5dbdcb5294ff4261d2dffc151dfb7942ff94a7d3e3475
SHA512

f53038564514ce3a73d3c7a2401529cc08316c938cad61734cab1654b12e0c503f821bd5be9cf460de2c0387621492b657fba588c23a91a1a36edf9801623452
SSDEEP

6144:cuO6bu/ifx5Z8mHjNUXMjxYnxmxGhkHPtQYRT7X:cupmm79HpUXMlYnAHHPdRnX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b27bdcee37e589701f81f99fab84be4_JaffaCakes118

Files

5b27bdcee37e589701f81f99fab84be4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27469583e05701a48aeeeb83e8265c0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
InterlockedDecrement
IsDebuggerPresent
Sleep
GetProcAddress
IsValidCodePage
HeapReAlloc
TlsFree
EnumSystemLocalesA
GetStringTypeA
GetCurrentProcessId
TlsSetValue
GetDriveTypeA
GetEnvironmentStringsW
UnhandledExceptionFilter
GetModuleHandleA
IsValidLocale
GetModuleFileNameW
VirtualFree
SetConsoleCtrlHandler
GetLocaleInfoA
WriteFile
FreeEnvironmentStringsW
GetVersionExA
LCMapStringW
CreateMailslotW
GetStartupInfoA
GetFileTime
SetConsoleTitleW
ExitProcess
GetTickCount
GetDiskFreeSpaceExA
TlsGetValue
HeapFree
GetCommandLineA
GetModuleFileNameA
GetTimeZoneInformation
LoadLibraryA
QueryPerformanceCounter
GetCPInfo
VirtualAlloc
GetCurrencyFormatW
FreeEnvironmentStringsA
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetCurrentThread
GetFileType
GetOEMCP
SetHandleCount
WideCharToMultiByte
InterlockedIncrement
FreeLibrary
GetSystemTimeAsFileTime
GetDateFormatA
CompareStringW
SetStdHandle
GetEnvironmentStrings
GetLastError
CompareStringA
SetUnhandledExceptionFilter
LeaveCriticalSection
GetUserDefaultLCID
InitializeCriticalSection
GetLocaleInfoW
SetLastError
CommConfigDialogW
HeapSize
TlsAlloc
GetProcessHeap
VirtualProtect
InterlockedExchange
GetStringTypeW
GetStdHandle
GetACP
MultiByteToWideChar
EnterCriticalSection
DeleteCriticalSection
LCMapStringA
HeapDestroy
HeapAlloc
SetEnvironmentVariableA
DeleteAtom
ReleaseSemaphore
HeapCreate

comdlg32

GetOpenFileNameA
GetFileTitleA
PrintDlgA
PageSetupDlgA
GetSaveFileNameW
ChooseColorW
ChooseColorA

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27469583e05701a48aeeeb83e8265c0a

Headers

File Characteristics

Imports

kernel32

comdlg32

Sections

.text Size: 122KB - Virtual size: 122KB

.data Size: 139KB - Virtual size: 151KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 122KB - Virtual size: 122KB

.data
Size: 139KB - Virtual size: 151KB

.rsrc
Size: 11KB - Virtual size: 10KB