ac12ef7e0560142272f0f83cc791ccda_JaffaCakes118

General

Target

ac12ef7e0560142272f0f83cc791ccda_JaffaCakes118
Size

108KB
MD5

ac12ef7e0560142272f0f83cc791ccda
SHA1

2c1c19d794911f1ec4ca145db92862ff5ab609fb
SHA256

d762983dad58d6869fced94c9ee3441b2e59cf7dc778874a2e65afc50ad457b4
SHA512

902930f1eef68bacfeb3525f4d003ec33ad84c9b66dfe9bfbae0a3bc7cd00ea080fd19f0eff156c5790a12cd4cbfeedc6ff51e767c7a4d764f89a3d0099cf74f
SSDEEP

3072:ufrkAgFPuV2hXsyFC0yICCfb3PVXo4g7nZ4GwPJltZrpRB:ufrdgFmV2hbFDLTPXg7nZ4Gwbthp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac12ef7e0560142272f0f83cc791ccda_JaffaCakes118

Files

ac12ef7e0560142272f0f83cc791ccda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ea9d9938cc7aeb7032270d1565bc1f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetVersion
GetCurrentProcessId
GetSystemTimeAsFileTime
ReadFile
QueryPerformanceCounter
WriteFile
CloseHandle
GetFileSize
GetProcAddress
GetStringTypeA
GetTickCount
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
FindResourceA
lstrcmpiA
LoadResource
LCMapStringW
CreateFileW
GetStringTypeW
HeapCreate
HeapDestroy
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType

user32

CreateWindowExA
BeginPaint
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
DefWindowProcA
ShowWindow
UpdateWindow
LoadStringA
FindWindowA
EndPaint

gdi32

TextOutA
Rectangle

advapi32

RegOpenKeyExA

ole32

CoTaskMemAlloc
CoInitialize

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.BSS
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ea9d9938cc7aeb7032270d1565bc1f8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 20KB - Virtual size: 18KB

.BSS Size: 44KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 20KB - Virtual size: 18KB

.BSS
Size: 44KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 32KB - Virtual size: 31KB