5ecd0e956ecdc4171901ac3fdfadfa1c_JaffaCakes118

General

Target

5ecd0e956ecdc4171901ac3fdfadfa1c_JaffaCakes118
Size

168KB
MD5

5ecd0e956ecdc4171901ac3fdfadfa1c
SHA1

881014913143ee597a65cf4b9466d25c0b7e6a0f
SHA256

368f5c4aaac4adc2ad26b54106f35e6c8bb95f5b517e80020289e5c30cd98a3f
SHA512

164b513f5cf8a28d6eeb318db79f829d6c0f34dd164206543cf127496c5258af1f28e59832743a607160c4feb30583a6a4725b91ada139a0a8b3bdea21e9440b
SSDEEP

3072:IBmcj+Mb9uK/vFaIdxmA2U+M7wetINm3afcHIKGOuNRgh:WrNb9pVpd4A2vMctmqfcoKzuch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ecd0e956ecdc4171901ac3fdfadfa1c_JaffaCakes118

Files

5ecd0e956ecdc4171901ac3fdfadfa1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbe3bf867f6483322cbf15b6c50e173d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
DuplicateHandle
PeekNamedPipe
GetEnvironmentVariableA
ResetEvent
FindFirstChangeNotificationA
DeleteFileA
OpenMutexA
CreateMutexA
WriteConsoleW
lstrcmpiA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetLastError
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
CloseHandle

ws2_32

WSAAddressToStringA
WSAWaitForMultipleEvents
WSAStartup

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dbe3bf867f6483322cbf15b6c50e173d

Headers

File Characteristics

Imports

kernel32

ws2_32

Sections

.text Size: 72KB - Virtual size: 70KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 4KB - Virtual size: 415KB

.rsrc Size: 64KB - Virtual size: 62KB

.text
Size: 72KB - Virtual size: 70KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 4KB - Virtual size: 415KB

.rsrc
Size: 64KB - Virtual size: 62KB