8b6279e1a58809ecfa9b6ffb22415085_JaffaCakes118

General

Target

8b6279e1a58809ecfa9b6ffb22415085_JaffaCakes118
Size

429KB
MD5

8b6279e1a58809ecfa9b6ffb22415085
SHA1

29978dc7856f61a4b0ffce926915070683934070
SHA256

995a4bd89e25fe071237b18a1b047c9df8186d69bfe3a58a19ec496630063be6
SHA512

40fa73eaea5348c155e7e6a64aa34c31f313effc3c356632fdf5fc7f3dc9cce23a2ab1f45fa2757d476b240993e6e9bedd22ba413a9634727643f901110ef80d
SSDEEP

6144:ZlyFE/36qikjAdJ6f67KoqRMR87DFN4rr4vXovDeuTquAyaHGw3jjtKFrKa:uQdikcL67oqRJPrvXoLTtbaHDzjt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b6279e1a58809ecfa9b6ffb22415085_JaffaCakes118

Files

8b6279e1a58809ecfa9b6ffb22415085_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e578e247b02b2929602ff97194ad40f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameA
ChooseFontA

kernel32

FreeEnvironmentStringsA
TlsAlloc
GetCurrentProcess
TlsGetValue
WriteFile
GetLocaleInfoA
EnterCriticalSection
SetLastError
GetTimeZoneInformation
CompareStringW
CreateToolhelp32Snapshot
VirtualAlloc
ExitProcess
InterlockedCompareExchange
MultiByteToWideChar
GetEnvironmentVariableA
CompareStringA
GetSystemInfo
GetEnvironmentStringsW
GetModuleFileNameA
VirtualQuery
GetFileType
InterlockedExchange
lstrcpyA
TerminateProcess
LeaveCriticalSection
LCMapStringW
SetHandleCount
GetStdHandle
ReadConsoleOutputCharacterA
GetTickCount
IsValidLocale
GetSystemTimeAsFileTime
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
RtlUnwind
GetOEMCP
GetDateFormatA
QueryPerformanceCounter
ContinueDebugEvent
GetEnvironmentStrings
GetStringTypeA
GetTimeFormatA
LoadLibraryA
WritePrivateProfileSectionW
HeapFree
GetCurrentProcessId
LCMapStringA
IsBadWritePtr
FreeEnvironmentStringsW
GetStringTypeW
IsValidCodePage
GetStartupInfoA
TlsFree
GetProcAddress
WideCharToMultiByte
GetCurrentThreadId
GetLocaleInfoW
GetCommandLineA
GetUserDefaultLCID
GetACP
VirtualProtect
UnhandledExceptionFilter
GetLastError
HeapSize
InitializeCriticalSection
SetEnvironmentVariableA
HeapAlloc
DeleteCriticalSection
EnumSystemLocalesA
GetCurrentThread
GetVersionExA
GetModuleHandleA
TlsSetValue
GetCPInfo

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e578e247b02b2929602ff97194ad40f5

Headers

File Characteristics

Imports

comdlg32

kernel32

Sections

.text Size: 135KB - Virtual size: 134KB

.rdata Size: 6KB - Virtual size: 34KB

.data Size: 279KB - Virtual size: 278KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 135KB - Virtual size: 134KB

.rdata
Size: 6KB - Virtual size: 34KB

.data
Size: 279KB - Virtual size: 278KB

.rsrc
Size: 8KB - Virtual size: 7KB