94e7fc293ce3f23b0368db11eaabc068_JaffaCakes118

General

Target

94e7fc293ce3f23b0368db11eaabc068_JaffaCakes118
Size

452KB
MD5

94e7fc293ce3f23b0368db11eaabc068
SHA1

3f3eeeabff013f387685f23cd93c028f7e947d6b
SHA256

fff2231ebf735b753452ba5abee18ca7cc0bb71e5a0488929c386ed0a91d0de8
SHA512

aa8f06d6ddc68c06e3d70ff871163f2a170efe3b16618a260dccc81a17c7582ec54d2f23776e2a9ea34d8e210994d7df560d2d78f12c0ef6e154a91ae9f4477f
SSDEEP

6144:mv4Gk90kynAIyQVteSVyTlYcXT6I7jxjFrkwjfD+5JjNMHNOnrbOcFe3eh:A6S7yQP2JYZI73zjfizNMHNOP9Fh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94e7fc293ce3f23b0368db11eaabc068_JaffaCakes118

Files

94e7fc293ce3f23b0368db11eaabc068_JaffaCakes118
.exe windows:4 windows x86 arch:x86

630f2c716d60602bf824c8912c79bd1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
SetEndOfFile
Sleep
LoadResource
TerminateProcess
ResetEvent
WriteFile
GetModuleHandleA
WideCharToMultiByte
RaiseException
SetStdHandle
GetLocaleInfoW
CloseHandle
GetCommandLineA
GetLocaleInfoA
GlobalUnlock
GetTickCount
IsDebuggerPresent
QueryPerformanceCounter
GlobalFree
GetConsoleOutputCP
GetLastError
HeapAlloc
VirtualAlloc
GetStartupInfoA
GetVersion
ExitProcess
GetProcAddress
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

630f2c716d60602bf824c8912c79bd1c

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 392KB - Virtual size: 391KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 392KB - Virtual size: 391KB

.rsrc
Size: 4KB - Virtual size: 1KB