644ab2fe1986f9d87002ab9e89ff157b_JaffaCakes118

General

Target

644ab2fe1986f9d87002ab9e89ff157b_JaffaCakes118
Size

44KB
MD5

644ab2fe1986f9d87002ab9e89ff157b
SHA1

925f86e9f389360052b20ec4c26fe32c23d5fdd3
SHA256

b3d9f670d318e354d106efcc16275e6409d491c8c6e2f5442ec3be8f342b2704
SHA512

d590bfe05e5cf57407b88f4c3e8d8b45733fabba06cdd6e29114657a902d05a55cba7cb541b53d18d4c1d27d3375e2de7b3f914f46ed8202eb8721be6e720e2f
SSDEEP

768:gd4Htv0QvMJOQToEgqssy/HtJxwddlxmuiKNnS28zo:MS0JOQTTI/HtJxwddH1FIo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
644ab2fe1986f9d87002ab9e89ff157b_JaffaCakes118

Files

644ab2fe1986f9d87002ab9e89ff157b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7eb61893b8f0a5542fda97d0cfb808ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
Sleep
CreateFileA
GetLastError
GetProcAddress
LoadLibraryA
DeleteFileA
GetModuleHandleA
GetTempPathA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
HeapFree
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
ReadFile
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7eb61893b8f0a5542fda97d0cfb808ef

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 9KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 9KB