625652581a952dad5cbb689db0241dd4_JaffaCakes118

General

Target

625652581a952dad5cbb689db0241dd4_JaffaCakes118
Size

448KB
MD5

625652581a952dad5cbb689db0241dd4
SHA1

e22e5f8d76ed1b76b50704b2c340d8b99e3f36e3
SHA256

3f704689c44cfa3088f2141859e4c068d2e7e01b1e9d8e9e69607766c2e070cf
SHA512

ee108e162db88dc1097014a9372a990a14b4ef8bdf0b223a46af95d5ec62a9740a4dd5a6fefdefa42ffae2e53fe2b90b5229915b359c90133819562d8f7538a6
SSDEEP

6144:1XXzShW4I8xj2RDvIrw7RznhuoZEKstuAWvUY94H+R3y8kmD00vO5H/eD9eAHKoO:8hWX0aRzmgJhCrEZ9HR31kovmH/K9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
625652581a952dad5cbb689db0241dd4_JaffaCakes118

Files

625652581a952dad5cbb689db0241dd4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b373f4ddf58c8829be1f8105630deaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
GetCurrentThreadId
CreateFileA
SetEndOfFile
GetFileType
IsDebuggerPresent
CreateFileW
InitializeCriticalSection
GetOEMCP
GetModuleHandleW
GetStringTypeW
HeapReAlloc
CloseHandle
ReadFile
MapViewOfFile
WideCharToMultiByte
RaiseException
GetCommandLineW
GetModuleFileNameA
FlushFileBuffers
GetTickCount
HeapDestroy
SetEvent
GetStdHandle
HeapAlloc
GetProcessHeap
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
GetCPInfo
GetACP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
LCMapStringA
LCMapStringW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b373f4ddf58c8829be1f8105630deaa

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 392KB - Virtual size: 391KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 392KB - Virtual size: 391KB

.rsrc
Size: 8KB - Virtual size: 5KB