854941b49fd98822d236f755b544ea73_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

854941b49fd98822d236f755b544ea73_JaffaCakes118
Size

76KB
MD5

854941b49fd98822d236f755b544ea73
SHA1

3d9238ac5abf6b26a9f7b0e20f1088a3d559905f
SHA256

c0b958a33cfd56337a11ffdda7e24ac1118497baa185ab6a35c0a3b978faf255
SHA512

c0744c52e38540d3264b28bdc98449dfb91af18ddeadd415f7764c4f178c83591108f3665c4695a0477acf87c9d2c9cb68e3fcafeff72e4e8492fd7d82665257
SSDEEP

768:ii9czmiwZgCwPps2RYkWGHhdc0mcqjmSHD7yHnlfZ9U+tCdFY:X99i+gxxTHHCc+mQD7yHlztCdFY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
854941b49fd98822d236f755b544ea73_JaffaCakes118

Files

854941b49fd98822d236f755b544ea73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0d5576d39bd9e5e9039bf3300326a2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread
FreeLibrary
GetProcAddress
LoadLibraryA
SetFileAttributesA
GetModuleFileNameA
GetLastError
CloseHandle
ReleaseMutex
OpenMutexA
WinExec
GetTempPathA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
WaitForSingleObject
ExitProcess
CreateMutexA
WriteFile
CreateFileA
lstrlenA
CopyFileA
GetWindowsDirectoryA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
LocalAlloc
InterlockedExchange
RaiseException
GetTickCount
GetSystemDirectoryA
ExitThread
TerminateProcess
DeviceIoControl
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers

Sections

55555555
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

11111111
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

22222222
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.1
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0d5576d39bd9e5e9039bf3300326a2b

Headers

File Characteristics

Imports

kernel32

Sections

55555555 Size: 8KB - Virtual size: 6KB

11111111 Size: 4KB - Virtual size: 1KB

.text Size: 20KB - Virtual size: 19KB

22222222 Size: 8KB - Virtual size: 7KB

.1 Size: 24KB - Virtual size: 23KB

.rsrc Size: 8KB - Virtual size: 4KB

55555555
Size: 8KB - Virtual size: 6KB

11111111
Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

22222222
Size: 8KB - Virtual size: 7KB

.1
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 8KB - Virtual size: 4KB