7340b0e36370f3f307c62b3733291386_JaffaCakes118

General

Target

7340b0e36370f3f307c62b3733291386_JaffaCakes118
Size

96KB
MD5

7340b0e36370f3f307c62b3733291386
SHA1

a86ee64fa1c1d821536e81c63fd903834d82e2de
SHA256

9549e576093d71fb6a6b00fb6205313442645182862d5daa08aa7bfb88e152f4
SHA512

a8e552509da54bc8613dcd8f73d1f87f81f15165e9b88a8476fea49da63761391693df0d8f6f36f911028342f23b08a37a4ca52dc7c2019a55032a44cedce944
SSDEEP

1536:7qY1m10oNLvzgkb+GJEjKI1gVSL+6kWaigU1tyAmAJMMwI2L:7qaM0oNzzgSAiVd6sigEtpmIwI2L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7340b0e36370f3f307c62b3733291386_JaffaCakes118

Files

7340b0e36370f3f307c62b3733291386_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4ef09f832db96290a330b92e7af0d49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CloseHandle
CreateFileA
WriteFile
ReadFile
SetFilePointer
GetModuleFileNameA
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCurrentDirectoryA
TerminateProcess
GetCurrentProcess
GetFileType
HeapDestroy
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle

user32

PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
LoadIconA
LoadCursorA
GetSystemMetrics
LoadImageA
RegisterClassExA
FindWindowA
IsIconic
ShowWindow
SetForegroundWindow
wsprintfA
MessageBoxA
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b4ef09f832db96290a330b92e7af0d49

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 928B

.crdata Size: 68KB - Virtual size: 68KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 928B

.crdata
Size: 68KB - Virtual size: 68KB