8adefe7754ecb6e57f0d9b464dcb7e48_JaffaCakes118

General

Target

8adefe7754ecb6e57f0d9b464dcb7e48_JaffaCakes118
Size

193KB
MD5

8adefe7754ecb6e57f0d9b464dcb7e48
SHA1

2cfdefe1e301578473469b6a602ed132cd8aced7
SHA256

f13656fd4e7de47d8894d04ba4bde7442363bc764bf9d42512ccf7aeca81adac
SHA512

7c86aa27f8eebffe3eba0d840d4d7ba79145aa1df80c30f3f1b45eca125e7dac04204e0470a060c51a3860f13b2f48c5f2eca53185a44f8a3a7298e6fa9aaf08
SSDEEP

6144:TuzCWU1+yCYOvk25uHhh4Pf01+UDd46lWc:L1+ymvDQBhws1+2d4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8adefe7754ecb6e57f0d9b464dcb7e48_JaffaCakes118

Files

8adefe7754ecb6e57f0d9b464dcb7e48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d3123a23fab77c14f2a462aa6d6f676

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetStringTypeW
GetACP
WriteConsoleW
LCMapStringW
WaitForSingleObject
SetProcessAffinityMask
FlushFileBuffers
QueryPerformanceCounter
LoadLibraryA
WaitForMultipleObjects
GetCurrentThreadId
WriteFile
InterlockedIncrement
SetEvent
CreateFileW
ReadFile
Sleep
GetOEMCP
GlobalLock
WriteConsoleA
GetModuleFileNameW
GetStringTypeA
GetCurrentProcessId
CreateProcessW
GetSystemTimeAsFileTime
EnumResourceTypesA
IsValidCodePage
DeleteCriticalSection
CreateEventW
GlobalAlloc
SetNamedPipeHandleState
GetEnvironmentStrings
LCMapStringA
InterlockedDecrement
GetLocalTime
CreateFileA
SetStdHandle
OutputDebugStringW
GetConsoleOutputCP
FreeEnvironmentStringsA
GetCPInfo
GetEnvironmentStringsW
MoveFileW
SetEndOfFile
GetLocaleInfoA
TerminateThread
GlobalUnlock

imm32

ImmAssociateContext

ole32

CoMarshalHresult
CoSetProxyBlanket
CoInitializeSecurity
CoQueryProxyBlanket
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance
StringFromGUID2

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d3123a23fab77c14f2a462aa6d6f676

Headers

File Characteristics

Imports

kernel32

imm32

ole32

Sections

.text Size: 124KB - Virtual size: 123KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 65KB - Virtual size: 65KB

.reloc Size: 1024B - Virtual size: 248KB

.text
Size: 124KB - Virtual size: 123KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 65KB - Virtual size: 65KB

.reloc
Size: 1024B - Virtual size: 248KB