648442869a088f0feadb280372281033_JaffaCakes118

General

Target

648442869a088f0feadb280372281033_JaffaCakes118
Size

212KB
MD5

648442869a088f0feadb280372281033
SHA1

8510eb97e45b55380d075270ce7193888e73366b
SHA256

88038b30e34ac45fc2663d9ff850df7d9357f837fddd46be093b5f9154c4b32b
SHA512

b825917061e5d344bafe84804f718e91cc04d5db4226fa9cb6a4ab6eb51febd24d67b7e82894b01ba421e10668b1f77e3ee49fb3ac12700422b32245ffa08074
SSDEEP

3072:JNSjKbqmibBtN8NCGBxTWg8Y48GtMfJc+g2gBklG+eRlGO2AyEud9rlQUTWI/PeK:TSwjiR80GzT98bNMB3gBklMRt9urLTh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
648442869a088f0feadb280372281033_JaffaCakes118

Files

648442869a088f0feadb280372281033_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f33410064d325772349e47b03d69ab22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
GetVolumePathNameA
GetThreadLocale
Process32First
GetFileTime
SetConsoleTitleA
GetDiskFreeSpaceA
GetConsoleCommandHistoryLengthA
ReadConsoleOutputAttribute
SetFileAttributesA
MoveFileWithProgressA
HeapReAlloc
lstrlenA
GetComputerNameA
GetProcessHeap
IsValidCodePage
OpenFileMappingA
Module32Next
DisconnectNamedPipe
VirtualProtectEx
GetExitCodeProcess
VirtualAlloc
CreateSocketHandle
GetDllDirectoryA
BuildCommDCBAndTimeoutsA
SetConsoleInputExeNameA
Module32First
SetProcessWorkingSetSize
GetCurrentProcessId
IsBadHugeWritePtr
GetFileAttributesA
GetLocaleInfoA
SetHandleInformation
_lopen
GetSystemWindowsDirectoryA
PeekConsoleInputA
GetPrivateProfileIntA
GetConsoleAliasExesW
HeapDestroy
ResetEvent
BuildCommDCBA
lstrcpyA
GetCommandLineA
WritePrivateProfileStructA
UnlockFileEx
IsBadHugeWritePtr
LoadModule
DefineDosDeviceA
CreateNamedPipeA
GlobalHandle
CancelTimerQueueTimer
GetConsoleKeyboardLayoutNameA
DuplicateHandle
LoadLibraryExW
UpdateResourceA
MoveFileExW
AllocConsole
GlobalDeleteAtom
GetThreadPriority
GetConsoleInputWaitHandle
WritePrivateProfileSectionA

tapi32

lineAddProviderA

Sections

.itext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 56KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f33410064d325772349e47b03d69ab22

Headers

File Characteristics

Imports

kernel32

tapi32

Sections

.itext Size: - Virtual size: 3KB

.text Size: 56KB - Virtual size: 716KB

.idata Size: 60KB - Virtual size: 56KB

.rsrc Size: 92KB - Virtual size: 90KB

.itext
Size: - Virtual size: 3KB

.text
Size: 56KB - Virtual size: 716KB

.idata
Size: 60KB - Virtual size: 56KB

.rsrc
Size: 92KB - Virtual size: 90KB