8ad1f0c05c3537d180e58a6acbf8a70b_JaffaCakes118

General

Target

8ad1f0c05c3537d180e58a6acbf8a70b_JaffaCakes118
Size

33KB
MD5

8ad1f0c05c3537d180e58a6acbf8a70b
SHA1

821a09208343f3a4b0c919180525b85cb299492f
SHA256

0c712614311998f39867675586551471fee932f48cb130bbdd190c106bc3386c
SHA512

adc7ab189095d38578ea0194d987cb27d33fcd2935f9d7222105c98df83795562785d5faf4de6289b59b06a16d69914c0655399c891c8ba9383327c2f044d3cf
SSDEEP

384:SL91u87SJ37N38OOkYtg+QtHrr/t4RHL4MJU1rm/wsAFtoxEc3iSRm0EYBbyu638:SZ1lEBJOk1h2HzJSm/z93iTB02ze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ad1f0c05c3537d180e58a6acbf8a70b_JaffaCakes118

Files

8ad1f0c05c3537d180e58a6acbf8a70b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5eaea7c95e8382371d522f8af4cdaee1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
HeapAlloc
HeapDestroy
HeapFree
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ReadFile
Sleep
UnhandledExceptionFilter
lstrlenW

user32

BeginPaint
CharNextW
CreateWindowExW
DefWindowProcW
DispatchMessageW
EnableWindow
EndPaint
GetDesktopWindow
GetDlgItem
GetFocus
GetParent
GetSystemMetrics
GetWindowLongW
GetWindowRect
IsDlgButtonChecked
LoadCursorW
LoadIconW
LoadStringW
MessageBoxW
PostMessageW
PostQuitMessage
ReleaseDC
SendMessageW
SetCursor
SetDlgItemTextW
SetFocus

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5eaea7c95e8382371d522f8af4cdaee1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 22KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 17KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 22KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 17KB

.rsrc
Size: 5KB - Virtual size: 5KB