76fe831de3c6016cedb5812062da59cc_JaffaCakes118

General

Target

76fe831de3c6016cedb5812062da59cc_JaffaCakes118
Size

50KB
MD5

76fe831de3c6016cedb5812062da59cc
SHA1

07c2caf04be38dc3b9215f4bc159aab179de0a9e
SHA256

ff6d5bf570123ba7b2f0caa30bbc0ba307ab818acbe399d4de736e5445e39c17
SHA512

a6ea5d3e628e05ea58643e5e651892ae905e425ceb6e7c5279185bd11faa68803f12ab38838c66f6a9ce34fb06dc423c4ccd50abba94c0c484ce5713efcc3c93
SSDEEP

768:96hFZzTEdZM6coJxDKqmNFnpQ/aCqBW0VM+t4wuMN:96hFRTEdmuJYqIeaCUtkQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76fe831de3c6016cedb5812062da59cc_JaffaCakes118

Files

76fe831de3c6016cedb5812062da59cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98a760b034f116084785e8abcb3726db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetLastError
lstrcatA
ExitProcess
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcpyA
GetEnvironmentVariableA
LoadLibraryA
lstrlenA
GetLocalTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetTickCount
GetTempPathA
Process32Next
SizeofResource
LockResource
LoadResource
FindResourceA
Sleep
GetWindowsDirectoryA
DeleteFileA
FreeLibrary
CreateThread
CloseHandle
ReleaseMutex
CreateMutexA
GetCommandLineA
LocalAlloc
InterlockedExchange
RaiseException
RtlUnwind
HeapReAlloc
MoveFileA
GetStartupInfoA
GetVersion
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetVersionExA
HeapDestroy
HeapCreate
WriteFile
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98a760b034f116084785e8abcb3726db

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 164KB - Virtual size: 163KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 164KB - Virtual size: 163KB