7083fb2450ddee9fb129d535f89180fd_JaffaCakes118

General

Target

7083fb2450ddee9fb129d535f89180fd_JaffaCakes118
Size

176KB
MD5

7083fb2450ddee9fb129d535f89180fd
SHA1

dfdd402b14216ee03314375095cfc630ee2c8adc
SHA256

43a4a83190a15990574c6da01a73fbc6ade8426e999ca8c0cd5d807e3d8281ac
SHA512

409c73f891f8abacd75cbe96ce489befcfdca0c64360d32a8ef4f5a1b4ecb2be7e9cf562970cef6b8b737972fe89c1f463cca00b37529ec48aef958e89636587
SSDEEP

3072:J/fper8tkHQQOWHGKoXfqzPeRwqdYLaSCqqiLWWtlOrf2j:ppeHQQQfK6wqd+NLTlAf2j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7083fb2450ddee9fb129d535f89180fd_JaffaCakes118

Files

7083fb2450ddee9fb129d535f89180fd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7509a1ba4e85d17c807a2ddb40f25557

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetTickCount
WriteFile
MultiByteToWideChar
GetSystemTimeAsFileTime
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
LoadLibraryA
InitializeCriticalSection

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7509a1ba4e85d17c807a2ddb40f25557

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 116KB - Virtual size: 113KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 116KB - Virtual size: 113KB

.reloc
Size: 4KB - Virtual size: 2KB