86c2f8653ede6757454481a31a46dceb_JaffaCakes118

General

Target

86c2f8653ede6757454481a31a46dceb_JaffaCakes118
Size

30KB
MD5

86c2f8653ede6757454481a31a46dceb
SHA1

73afe9967ce976bd81c1189c1ba0b7a8a8c0ba6b
SHA256

c2f5903f9ca31be0a33c40aa2ecad4cafa5eccd932380acefba14a92675e990c
SHA512

1ed7c2a5e12f1ce15a50a974797a2b10cf8a937e6ee4ac4871abb7f3e546c886eb858a08d4ddac9a0c37eef5fb9bbc2580431689bf0a17c69ad5d520a26ff72a
SSDEEP

768:ByyyyyyyyyyyyyyyyRUhMPZ4fB1LsutAF6+GSkZCuXTHJYdQId1Pb1:gMPCfB5dAFr+Yx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86c2f8653ede6757454481a31a46dceb_JaffaCakes118

Files

86c2f8653ede6757454481a31a46dceb_JaffaCakes118
.exe windows:40088 windows x86 arch:x86

0a3b8e2cbcdc0e5bfe9c856ef6f8d7e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateThread
GetLastError
InitializeCriticalSection
GetVersionExA
InitializeCriticalSection
VirtualAlloc
InterlockedIncrement
CreateFileW
HeapAlloc
lstrcmpiW
VirtualAlloc
lstrcmpiW
MultiByteToWideChar
GetCurrentProcess
VirtualAlloc
GetCurrentProcessId
Sleep
GetTickCount
HeapDestroy
UnhandledExceptionFilter
InitializeCriticalSection
lstrcmpiW
GetCommandLineA
WideCharToMultiByte
HeapFree
InitializeCriticalSection
GetProcAddress
GetModuleFileNameA
GetCurrentProcess
SetLastError
CloseHandle
UnhandledExceptionFilter
CreateThread
InitializeCriticalSection
GetModuleHandleA
GetSystemTimeAsFileTime
GetProcAddress

user32

LoadImageW
GetWindow
LoadCursorW
SetDlgItemTextW
LoadCursorW
SetDlgItemTextW
GetWindowRect
SendMessageW
GetDC
IsIconic
EndPaint
GetFocus
IsIconic
DestroyWindow
GetWindowRect
GetSystemMenu
GetFocus
SetCursor
FillRect
ReleaseDC
LoadStringW
EndDialog
wsprintfA
GetDC
DestroyIcon
ShowWindow
SetWindowLongW
SetWindowTextW
GetMessageW
BeginPaint
IsDlgButtonChecked
CreateWindowExW
CheckDlgButton
PostQuitMessage
wsprintfA
ReleaseCapture
GetSystemMenu
wsprintfA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a3b8e2cbcdc0e5bfe9c856ef6f8d7e6

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 5KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 4KB

.rsrc Size: 10KB - Virtual size: 12KB

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 5KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 10KB - Virtual size: 12KB