8e90e5e08bb0e494c90803802dba598a_JaffaCakes118

General

Target

8e90e5e08bb0e494c90803802dba598a_JaffaCakes118
Size

560KB
MD5

8e90e5e08bb0e494c90803802dba598a
SHA1

1ca5d613a23bfee8c981f3612df78fcf267b85c3
SHA256

25376dcc88722af0dc51cf0d15dbf375c6ebc81bd8fa1c61bade7101ecba377f
SHA512

cac62836f04e8c38622d57e16fdadfd8c74919f63628e2b42f98de8c8d256f62adb4f0b35cebd62de084e0978c78525df82c4b69062620bd086b699d4ef62952
SSDEEP

1536:4Vm5t23C4r3u0ojb2+RGNLd9wD+hMYNQd+BR9o3vCkza:qPXXusx92+9A+BR9o3aO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e90e5e08bb0e494c90803802dba598a_JaffaCakes118

Files

8e90e5e08bb0e494c90803802dba598a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8bc4babca925ead712d95fef83dd9e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
GetStringTypeA
LoadLibraryA
TlsSetValue
VirtualAlloc
VirtualFree
lstrcatA

msvcrt

exit
wcscat
wcslen
__p__commode

setupapi

SetupAddInstallSectionToDiskSpaceListA
SetupAddSectionToDiskSpaceListA
SetupDiBuildClassInfoList
SetupDiRemoveDeviceInterface

user32

CharToOemBuffW
EnumDesktopsA
GetAncestor
GetAsyncKeyState
GetClassNameW
GetKeyNameTextA
IsCharAlphaW
IsRectEmpty
MapVirtualKeyW
OemToCharW
SendMessageTimeoutA
SendMessageW
SetTimer
ToUnicodeEx
UnhookWindowsHookEx
wvsprintfA

Sections

.text
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 314KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rata
Size: 190KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b8bc4babca925ead712d95fef83dd9e9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

setupapi

user32

Sections

.text Size: 34KB - Virtual size: 36KB

.data Size: 314KB - Virtual size: 316KB

.rata Size: 190KB - Virtual size: 192KB

.bss Size: - Virtual size: 16KB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 34KB - Virtual size: 36KB

.data
Size: 314KB - Virtual size: 316KB

.rata
Size: 190KB - Virtual size: 192KB

.bss
Size: - Virtual size: 16KB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 16KB - Virtual size: 16KB