877ba1b88991ab3253044966fc868016_JaffaCakes118

General

Target

877ba1b88991ab3253044966fc868016_JaffaCakes118
Size

128KB
MD5

877ba1b88991ab3253044966fc868016
SHA1

5fb14c48c560e91b1d413a17aa7fdaf42653c7ec
SHA256

d3ecb198609f8162cb9f545ca9fdd273369a14e9a1c931d8da1d0699d3f3e4b2
SHA512

b698302b89a24b653e2a94adfeb0bd3cb08a723972195e607513068f0e01895da2c68b3fad7ed32e9d7557674e6d18543a6ea6087a0311d3a739e051eb8ce193
SSDEEP

3072:mY5C3+rxoeG5LjQMnPtIJdTsRDCucta6VdNtk:mY5ZZ0YSPtIJdTsRDCusV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
877ba1b88991ab3253044966fc868016_JaffaCakes118

Files

877ba1b88991ab3253044966fc868016_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26e6f78f3c8cd71b99fefcebd06d6493

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrcmpiW
lstrcatW
lstrcpyW
lstrcpynW
GetDateFormatA
LoadLibraryA
GetSystemTime
GetSystemPowerStatus
GetStringTypeA
WideCharToMultiByte
LCMapStringA
ReadFile
SetEndOfFile
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
CreateFileW
SetFilePointer
FlushFileBuffers
SetStdHandle
lstrlenA
LCMapStringW
MultiByteToWideChar
HeapAlloc
RtlUnwind
HeapReAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetLastError
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeW

user32

GetDesktopWindow
GetWindowDC
ReleaseDC
CreateCaret
ShowCaret
GetParent
BeginDeferWindowPos
SystemParametersInfoA
CopyRect
GetWindowRect
GetFocus
SetFocus

gdi32

GetTextMetricsA
SetMapMode

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26e6f78f3c8cd71b99fefcebd06d6493

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 84KB - Virtual size: 82KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 84KB - Virtual size: 82KB