a4f51e8f02e982480720c983c63a7ba8_JaffaCakes118

General

Target

a4f51e8f02e982480720c983c63a7ba8_JaffaCakes118
Size

156KB
MD5

a4f51e8f02e982480720c983c63a7ba8
SHA1

00d62c2bda0dc25d6ecb090a88305fa677f9b27a
SHA256

413b991907e13512e266a2a484d258f4c9fa13dfa307902b6c2debe939ef2cd6
SHA512

7ed93d5eb861f13cec6228ea8a494c29843530497bf1326cb52a8a79b6f923da39e7789c00655594d277cabcbde1c6798fc4de20b4b861afd8d1fb3725fe3e27
SSDEEP

3072:uQiTe8t58J91PoTje+/O1iq/GvxYxKXvR7HFAkJK7PLPX81tUXXia1Pf0QcqB1Pa:uQigN4qCObCYxmRjF3EDvvCQXbHhN97G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4f51e8f02e982480720c983c63a7ba8_JaffaCakes118

Files

a4f51e8f02e982480720c983c63a7ba8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c1cda61be610895a3878c1895e645320

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
WriteFile
GetLastError
GetProcAddress
LoadLibraryA
OpenMutexA
CreateMutexA
CloseHandle
GetTempPathA
lstrcpyA
lstrcmpA
RaiseException
GetStringTypeW
FindAtomA
ExitProcess
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
VirtualQuery

user32

ClientToScreen
GetFocus
wsprintfA
InflateRect
GetCursorPos
GetWindowRect

shlwapi

SHGetValueA

gdi32

GetBkColor

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c1cda61be610895a3878c1895e645320

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

gdi32

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 110KB - Virtual size: 112KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 110KB - Virtual size: 112KB