a09ade41a81af44022bd8941a59c9f2a_JaffaCakes118

General

Target

a09ade41a81af44022bd8941a59c9f2a_JaffaCakes118
Size

189KB
MD5

a09ade41a81af44022bd8941a59c9f2a
SHA1

0819478b88a2e2868447f853ca4084b44db775fb
SHA256

db363acc49361c2cdfcc5f41b64f2d1201dd4f8d1e2de54b564928ab73a4ef5f
SHA512

d7f6c281c65cfdc01b6cf4544737052aba3e9b91cf21f8299886529d4c3d01d80ca12c001c6228ffd3cc427bf6b5729ca8d7e4566a6cbaae638bcb2e30df0858
SSDEEP

3072:7Z3BSecLeQM0QyZGSyNMW4BgHTG2Cf2t1jkpLjDcWGmSCFKojhf3zFalR19xm6/s:7xBS/yQxZ0k9ejkp3JFHhPzFc39Zst

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a09ade41a81af44022bd8941a59c9f2a_JaffaCakes118

Files

a09ade41a81af44022bd8941a59c9f2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

043d085bdd1372dc19fd8ae6a97cc8f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessAffinityMask
CreateEventW
SetStdHandle
WriteConsoleA
GetEnvironmentStringsW
WriteFile
GetACP
FreeEnvironmentStringsA
MoveFileW
GetLocalTime
CreateFileA
QueryPerformanceCounter
GetEnvironmentStrings
GlobalAlloc
GetLocaleInfoA
GetCurrentProcessId
GetModuleFileNameW
GetOEMCP
InterlockedIncrement
LCMapStringW
CreateProcessW
InterlockedDecrement
EnumResourceTypesA
GlobalLock
DeleteCriticalSection
TerminateThread
GetCurrentThreadId
WriteConsoleW
ReadFile
SetEndOfFile
LoadLibraryA
GetProfileIntA
FlushFileBuffers
IsValidCodePage
GetStringTypeA
Sleep
WaitForSingleObject
CreateFileW
GetCPInfo
WaitForMultipleObjects
SetEvent
GetConsoleOutputCP
FreeEnvironmentStringsW
GetStringTypeW
OutputDebugStringW
LCMapStringA
GetSystemTimeAsFileTime
GlobalUnlock

imm32

ImmAssociateContext

ole32

CoMarshalHresult
CoInitializeEx
CoQueryProxyBlanket
CoUninitialize
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoTaskMemFree
StringFromGUID2

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

043d085bdd1372dc19fd8ae6a97cc8f8

Headers

File Characteristics

Imports

kernel32

imm32

ole32

Sections

.text Size: 119KB - Virtual size: 118KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 66KB - Virtual size: 66KB

.reloc Size: 1024B - Virtual size: 104KB

.text
Size: 119KB - Virtual size: 118KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 66KB - Virtual size: 66KB

.reloc
Size: 1024B - Virtual size: 104KB