7339037468d2a0f22fe646a0c51bb383_JaffaCakes118

General

Target

7339037468d2a0f22fe646a0c51bb383_JaffaCakes118
Size

133KB
MD5

7339037468d2a0f22fe646a0c51bb383
SHA1

947590e437728a91f738766f367d2ce57b8dc3f8
SHA256

ba7114e4a66f8e57ae8335de27c6b5d2f550e6e6a4152525e2903d41c94a09f1
SHA512

e6014a76533c701fea1838a8b8eb8ccf6abdb27c0662fc0680b3cca7fd10d382765b46312bbf2ac9b0caa2f178f9966536b986cf1efdb09c1ddd2dc333fdfac0
SSDEEP

3072:zKCYtZf+w3TBfto8o3ulLqXCjuRmHT312z:2CI+w3TBloyAjRM71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7339037468d2a0f22fe646a0c51bb383_JaffaCakes118

Files

7339037468d2a0f22fe646a0c51bb383_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f501d0cce64c9673c95d934d28f49149

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateRemoteThread
HeapFree
FlushInstructionCache
WriteProcessMemory
VirtualProtectEx
VirtualAllocEx
HeapAlloc
GetProcessHeap
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GetLastError
GetCurrentProcess
WriteFile
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
GetModuleFileNameA
Sleep
WinExec
GetWindowsDirectoryA
lstrlenA
GetTempPathA
ExitProcess
GetCurrentThreadId
GetStringTypeW
FlushFileBuffers
GetStringTypeA
LCMapStringW
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA

user32.dll.

GetInputState
GetMessageA
PostThreadMessageA

Sections

.gdcat
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f501d0cce64c9673c95d934d28f49149

Headers

File Characteristics

Imports

kernel32

user32.dll.

Sections

.gdcat Size: 43KB - Virtual size: 42KB

.rsrc Size: 89KB - Virtual size: 92KB

.gdcat
Size: 43KB - Virtual size: 42KB

.rsrc
Size: 89KB - Virtual size: 92KB