88c80da0184d3f81cbc78767463981c1_JaffaCakes118

General

Target

88c80da0184d3f81cbc78767463981c1_JaffaCakes118
Size

476KB
MD5

88c80da0184d3f81cbc78767463981c1
SHA1

d2cd3ffc3a6d8b74b971a23a2deddaa609d4b02c
SHA256

2dde98f41b793875bedd2a2082305d8a2398e0c784185a84e701ff2052c929df
SHA512

f3a045cb019e2a919d1037304cb8efa009aa2ef4df4d1d935a4449dc95ffd68f5bd99f444eff8fe7af93d898f90280760d886ed6f7e475a8fbf8f7a9f384eb01
SSDEEP

6144:dp1bEIf7VCbvlo7bXhnzoK/uDvIsU0GKjAoJRolcbbWVIMpcAkwpY+EM3Zsj:dpJx7VCLyn2hU0Ndoe3W+MpImi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88c80da0184d3f81cbc78767463981c1_JaffaCakes118

Files

88c80da0184d3f81cbc78767463981c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c00a1a2085e71cce66c32f505b5d92a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetLastError
LeaveCriticalSection
GetTickCount
CreateFileA
SetEndOfFile
Sleep
FindClose
CreateFileW
InitializeCriticalSection
LCMapStringA
GetOEMCP
SetEnvironmentVariableA
GetProcAddress
GetStringTypeW
HeapReAlloc
ResetEvent
WriteFile
InterlockedExchange
ReadFile
SetFilePointer
CreateThread
GetModuleHandleA
WaitForMultipleObjects
MultiByteToWideChar
GetCommandLineW
LockResource
GetFileSize
GetConsoleMode
GetEnvironmentStrings
GetCurrentProcess
GetLocalTime
GetModuleFileNameA
GetVersionExA
GetEnvironmentStringsW
FlushFileBuffers
GetThreadLocale
ExitProcess
QueryPerformanceCounter
GetDriveTypeA
WaitForSingleObject
lstrcmpiA
GetStdHandle
HeapFree
GetLastError
VirtualAlloc
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
EnterCriticalSection
GetCPInfo
GetACP
LoadLibraryA
LCMapStringW
GetStringTypeA
InterlockedDecrement
InterlockedIncrement

user32

TranslateMessage
PostMessageA
EnableWindow
IsWindow
GetParent
EndDialog
SetForegroundWindow

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9c00a1a2085e71cce66c32f505b5d92a

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 436KB - Virtual size: 436KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 436KB - Virtual size: 436KB