ae0101a1b3ea6de29884e420a680957b_JaffaCakes118

General

Target

ae0101a1b3ea6de29884e420a680957b_JaffaCakes118
Size

200KB
MD5

ae0101a1b3ea6de29884e420a680957b
SHA1

ee08f2bbf9934175f51a8a5f519f38410c9c8c5a
SHA256

33de4c9d67b2f8f8be0373e75dba8e3bb2c1b85848d975fbf4ee7eab627ca635
SHA512

1e7fe0e79e9d7546a1a974975822c501bcc1f75f98df00c4c8e0ef89e46aa9c93a38e53393e3da2c7a611d8584dc6b8f4302013553fbcd52920aa720df3e7f9b
SSDEEP

6144:TnkgFdROw4Kc+0lGdbZmKwXX04OqzDUGI:TntRXJ7bA0l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae0101a1b3ea6de29884e420a680957b_JaffaCakes118

Files

ae0101a1b3ea6de29884e420a680957b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae80904933fb8a9a65c9c74d87b7823b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
SetFileAttributesA
RemoveDirectoryA
Sleep
GetCurrentThreadId
LoadLibraryA
GetProcAddress
GetProfileStringW
VirtualProtect
lstrlenA
LocalAlloc
FreeLibrary
InterlockedExchange
GetLastError
RaiseException
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
CloseHandle
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
SetFilePointer
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
VirtualQuery
HeapSize
SetEndOfFile
ReadFile
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetSystemInfo

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 519KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae80904933fb8a9a65c9c74d87b7823b

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 88KB - Virtual size: 85KB

.data Size: 48KB - Virtual size: 519KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 88KB - Virtual size: 85KB

.data
Size: 48KB - Virtual size: 519KB

.rsrc
Size: 4KB - Virtual size: 3KB