5d1888352632eec3c3b7206622adcf69_JaffaCakes118

General

Target

5d1888352632eec3c3b7206622adcf69_JaffaCakes118
Size

60KB
MD5

5d1888352632eec3c3b7206622adcf69
SHA1

b495ca53e91ef54d25a1dd1a092da0edbb654d3a
SHA256

b52dbc11d5ae1324c9fa615c6e70fc86f86edaf119782a3fc521e86c3187c025
SHA512

fd8cce86b6741adc53e419989de3efee3f6df322634e1d775d6b01ff05af8eea4947936886327fb43d78a5b1ff5f67db454190569fc8aa92dd249acde5848843
SSDEEP

768:ukeFeXzW2a913feU/fJEBhHwM7l1tT4dMZuxU:VeFeX8D3mAfGN1tTiGuG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d1888352632eec3c3b7206622adcf69_JaffaCakes118

Files

5d1888352632eec3c3b7206622adcf69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f781db373dad733f5c2065bed6e05267

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
FindResourceA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
Sleep
WriteFile
SizeofResource
lstrlenA
ExitProcess
WinExec
lstrcatA
lstrcpyA
GetModuleHandleA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
GetFileSize
GetWindowsDirectoryA
OpenProcess
GetCurrentProcessId
GetSystemDefaultLCID
GetVersionExA
GetCurrentDirectoryA
MoveFileExA
CreateThread
GetLastError
CreateEventA
GetTempPathA
CopyFileA
GetCurrentThreadId
GetFileAttributesA
HeapReAlloc
HeapAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
CreateDirectoryA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f781db373dad733f5c2065bed6e05267

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.tls Size: 4KB - Virtual size: 8B

.rsrc Size: 156KB - Virtual size: 153KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB

.tls
Size: 4KB - Virtual size: 8B

.rsrc
Size: 156KB - Virtual size: 153KB