8cf7b43771a98a6c9945ab8a2f2267f1_JaffaCakes118

General

Target

8cf7b43771a98a6c9945ab8a2f2267f1_JaffaCakes118
Size

52KB
MD5

8cf7b43771a98a6c9945ab8a2f2267f1
SHA1

0d289218f27c2acb35ecea53bd0e0a93043e301d
SHA256

5c43cecd5ab06119cfd82609de54488aa12a0244869c48911be5d778d013da5b
SHA512

e4aa82382f9e450fcc3426d76ed365d03ce749f4d5583493b461fb01c06c985042277d822cf14def013fcf5b54ee2ea0e7cb607ae4939cfff1e6ee631b72478a
SSDEEP

768:jj9I005KztN0ychHUdPw9qX2uTvDqyvRijv9SGz/Cf76LwJIGKOfZrRn0510lqov:9I005dLKZrRncvo80myRI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cf7b43771a98a6c9945ab8a2f2267f1_JaffaCakes118

Files

8cf7b43771a98a6c9945ab8a2f2267f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

022a7f1fcaaf564518198ca4d6668527

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
ShowWindow
LoadIconA
LoadCursorA
RegisterClassExA
PostQuitMessage
MessageBoxA
DefWindowProcA
EnableWindow
SendMessageA

gdi32

GetStockObject

kernel32

GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
GetStringTypeW
GetOEMCP
GetACP
GetCPInfo
CreateFileA
FlushFileBuffers
SetStdHandle
GetProcAddress
GetStdHandle
lstrlenA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
ReadFile
WriteFile
TerminateProcess
GetCurrentProcess
SetFilePointer
SetHandleCount
GetFileType
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

022a7f1fcaaf564518198ca4d6668527

Headers

File Characteristics

Imports

user32

gdi32

kernel32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 144KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 144KB