968821c9dee51b8cc78728571b0549ba_JaffaCakes118

General

Target

968821c9dee51b8cc78728571b0549ba_JaffaCakes118
Size

376KB
MD5

968821c9dee51b8cc78728571b0549ba
SHA1

bf5d07bf379b18694631141c38b6a54943bd13ab
SHA256

19b5f79f11d7afae2d881fe7ac960c459991769ef6efc2a1864d12ba3d2a4942
SHA512

fee7a75c7b153a3566cea7e2a89028496615dce2593bc484b30df347e71999a67041a2ce785ad1fc2a6f8f8096abe2e7aca6697bc983368e3878702a07aeef28
SSDEEP

6144:nbrKkEDuDB/Vl9Dc5s35l874s0TjXYBmQdwNjHJf9vbmWG00DPQoX:n/5XVli5P8s0TjXoHdYDJf9viR000oX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
968821c9dee51b8cc78728571b0549ba_JaffaCakes118

Files

968821c9dee51b8cc78728571b0549ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d62da5400fec95f3501e2b7260c0aef7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
SetLastError
VirtualAlloc
Sleep
GlobalFree
LocalFree
GetModuleHandleA
GlobalAlloc
LoadLibraryA
GetFileSize
VirtualFree
SuspendThread
CreateThread
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceExA
VirtualProtect
CreateFileA
CloseHandle
GetSystemTime
WriteFile
ReadFile
GetSystemInfo
CopyFileA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
GetStringTypeW
RemoveDirectoryA
LoadLibraryExW
GetProcAddress
GetLastError
VirtualQuery
LocalAlloc
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte

user32

SetWindowRgn
GetDesktopWindow
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
GetDC
ReleaseDC
IsWindow
IsWindowEnabled

gdi32

CreateCompatibleBitmap
GetDIBits
CreatePenIndirect
GetObjectA
DeleteObject

ole32

CoUninitialize

oleaut32

VariantInit
VariantCopy

lz32

LZClose

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 316KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d62da5400fec95f3501e2b7260c0aef7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

lz32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 20KB - Virtual size: 18KB

.rsrc Size: 316KB - Virtual size: 716KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 20KB - Virtual size: 18KB

.rsrc
Size: 316KB - Virtual size: 716KB