65e743b68f53acbae24c0bdf1aba28aa_JaffaCakes118

General

Target

65e743b68f53acbae24c0bdf1aba28aa_JaffaCakes118
Size

376KB
MD5

65e743b68f53acbae24c0bdf1aba28aa
SHA1

f32280e07f29ce8805caaaa4dc5281bc2d1073f6
SHA256

98a9b8d210addb4c05d7d87349f12af4262bd1bd3b6c2f8a0b6864f901937448
SHA512

b56eb811ec1c6ad5ed1ea075dc450fff64eaede7b179e746ce146144321b032aff15283c22e3f229c96f1735357f29188f122e4ada7229d34171422f0169ca43
SSDEEP

6144:jLNIKbHpnp0n/xIpwIQFXNx2bp09idFTaqqTUAxWt7WW0wO:jLNIKbJnpeJSwIu9Cp09idFmqEUyWbO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65e743b68f53acbae24c0bdf1aba28aa_JaffaCakes118

Files

65e743b68f53acbae24c0bdf1aba28aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23992f789e28696140497b7348b78f5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

InterlockedDecrement
CloseHandle
CreateThread
ExitProcess
ExitThread
GetCommandLineW
GetCurrentProcess
GetCurrentThreadId
GetTickCount
HeapAlloc
HeapCreate
HeapFree
SetPriorityClass
lstrcpyW
lstrlenW
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23992f789e28696140497b7348b78f5f

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 96KB - Virtual size: 92KB

.data Size: 24KB - Virtual size: 24KB

.bss Size: 252KB - Virtual size: 252KB

.text
Size: 96KB - Virtual size: 92KB

.data
Size: 24KB - Virtual size: 24KB

.bss
Size: 252KB - Virtual size: 252KB