834c95c4fb9d2a5d1ae7bc0b2a60c180_JaffaCakes118

General

Target

834c95c4fb9d2a5d1ae7bc0b2a60c180_JaffaCakes118
Size

504KB
MD5

834c95c4fb9d2a5d1ae7bc0b2a60c180
SHA1

bc6d081203e9de552ea3bbc776f2257cbae409a4
SHA256

2d4a02d887a3fba030b017f1a474a584a2433b8a176b8d6a2f834db763a21b89
SHA512

2a0edcc40e968cdd93bf3484c18d97f8e07273179f3e172bc78b15140d2694ec8a1f97318a40a0932bf385dc702a24f4f13589ea4ab867c0cb5ef334ce5e7d3b
SSDEEP

12288:4PrckbipoBgbT7XtdRBu0Y1Waf/B5SuiLjNeh+aahp8T:4PrZ+dR3Yxf/BViFrpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
834c95c4fb9d2a5d1ae7bc0b2a60c180_JaffaCakes118

Files

834c95c4fb9d2a5d1ae7bc0b2a60c180_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46436d2324ef66256490d38effeabb69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
WaitForMultipleObjects
CloseHandle
ReadFile
MapViewOfFile
ReleaseMutex
TerminateProcess
LocalFree
HeapAlloc
GetProcessHeap
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

ScreenToClient
GetSysColor
TranslateMessage
PeekMessageA
DispatchMessageA
GetSystemMetrics
PostQuitMessage
EndDialog
LoadStringA
LoadIconA
CreateWindowExA
GetSubMenu
FillRect

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 456KB - Virtual size: 456KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46436d2324ef66256490d38effeabb69

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 456KB - Virtual size: 456KB

.rsrc Size: 4KB - Virtual size: 704B

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 456KB - Virtual size: 456KB

.rsrc
Size: 4KB - Virtual size: 704B