7111ce6689bb13a04ee2ab50cfca1ec2_JaffaCakes118

General

Target

7111ce6689bb13a04ee2ab50cfca1ec2_JaffaCakes118
Size

125KB
MD5

7111ce6689bb13a04ee2ab50cfca1ec2
SHA1

e5c984a6725217d2981597883922030830c7b386
SHA256

c666812a7368d46e1e82ccc289cac3ea774375ceb1858d187bdd275e8ad69de7
SHA512

1811ec76aff07eedd4ca4666b863c4f1ba95a12a62b557feb8cb176a6c2c1367e453f72b10cb55263042a9c41e50b0a255520f5b47eb04253337b01a26d8cdea
SSDEEP

1536:ITqTxRYwBdt3LnQ0fRbOlD4Vm71PrgP+IymUgefH3W6MMr2+Uk+fcPVZvqgqXI:aq9dt3LnXtSWm7WmDNFLMMrYk+mdqgt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7111ce6689bb13a04ee2ab50cfca1ec2_JaffaCakes118

Files

7111ce6689bb13a04ee2ab50cfca1ec2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f8d68df80bbbd9aa0625249cb00abf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
QueryDosDeviceA
CreateFileA
CloseHandle
GetCurrentProcess
GlobalAlloc
GlobalFree
GetDriveTypeA
OutputDebugStringA
FreeLibrary
LoadLibraryA
GetVersionExA
GetModuleHandleA
GetProcAddress
GetLastError
HeapAlloc
HeapFree
GetCommandLineA
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers

advapi32

OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
AllocateAndInitializeSid

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.krdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2f8d68df80bbbd9aa0625249cb00abf7

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 1KB

.krdata Size: 72KB - Virtual size: 72KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 1KB

.krdata
Size: 72KB - Virtual size: 72KB