8342fe82e09783bd20a1fdfc8f3914fe_JaffaCakes118

General

Target

8342fe82e09783bd20a1fdfc8f3914fe_JaffaCakes118
Size

440KB
MD5

8342fe82e09783bd20a1fdfc8f3914fe
SHA1

6571287390b1541a0d9ac94104bc98510d39741a
SHA256

17129dbee14ab0b9d55fc449074c31c7eb730c64b6cf9211f2557e7c1c1c8f80
SHA512

b86f8390509f3b6798cad89ab720f0f73676623dc5b04f9c0e1edbae18cc11bc2ac1ab6c74fd3f4dd8d7c762c3588adc9d80ce4ec6795850661317dee82dfb38
SSDEEP

12288:0ErTlzMS+D9JvAJ72NiIzXc2LT4I6kLtaqB6:0ErNMZ15XcM4I6k5PB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8342fe82e09783bd20a1fdfc8f3914fe_JaffaCakes118

Files

8342fe82e09783bd20a1fdfc8f3914fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f73d8bac9bff7626705e5f5681bd43e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
GetParent
KillTimer
IsWindow
DispatchMessageA
MessageBoxA
SetWindowLongA
GetDC
DrawTextA
SendMessageA
SetForegroundWindow
LoadCursorA
ScreenToClient
InvalidateRect
CreateWindowExA
LoadIconA
LoadStringA
DestroyWindow

kernel32

LoadLibraryA
GetStringTypeW
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
VirtualAlloc
GetVersion
GetTickCount
CreateFileA
SetEndOfFile
GetFileType
Sleep
TlsGetValue
FindClose
GetConsoleMode
VirtualQuery
InitializeCriticalSection
TerminateProcess
GetDriveTypeA
GetModuleHandleW
HeapReAlloc
GetACP
GetSystemTimeAsFileTime
ReadFile
WriteFile
FindNextFileW
SetFilePointer
GetStringTypeA
GetFileAttributesA
WideCharToMultiByte
CloseHandle
GetProcAddress
GetCommandLineA
MultiByteToWideChar
UnhandledExceptionFilter
DeleteFileA
GetConsoleOutputCP
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
GetFileAttributesW
GlobalUnlock
GetVersionExA
ExitProcess
IsDebuggerPresent
LCMapStringA
GetOEMCP
WaitForSingleObject
GlobalFree
LoadLibraryW
lstrlenA
lstrlenW
LCMapStringW
HeapFree
GetLastError
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f73d8bac9bff7626705e5f5681bd43e

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 388KB - Virtual size: 388KB

.rsrc Size: 4KB - Virtual size: 640B

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 388KB - Virtual size: 388KB

.rsrc
Size: 4KB - Virtual size: 640B