ae334b248d39b1c4ce952feae9a7b196_JaffaCakes118

General

Target

ae334b248d39b1c4ce952feae9a7b196_JaffaCakes118
Size

1.8MB
MD5

ae334b248d39b1c4ce952feae9a7b196
SHA1

ab217efc0e30cfff6f107863bcd690d39a925e34
SHA256

6e13b7b10c265d6c8da83c9bf13e3f115de707f799e36d8b877d13f428df5efe
SHA512

fb8ba895bd5aad03ee1f3b7553aea4020f7d8a2f50d78c38a5b4f7e3a800e6c6d97eb7cd60e0fbdbe785d60bc6bf2a3c9f934d0ceb24670d5ae58db7898133be
SSDEEP

24576:tVJd+6JvhTHxFu5OAeWblAPv5I1r/TvrQsJxextPtkbA2dYvY0Ym32/LSZQZfEkK:tVJbJhHx3ALbqG1r/nSPVrwL/LoQVm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Sandboxie 3.46 + serial PL/SandboxieInstall.exe

Files

ae334b248d39b1c4ce952feae9a7b196_JaffaCakes118
.rar
Sandboxie 3.46 + serial PL/PRZECZYTAJ!!!.txt
Sandboxie 3.46 + serial PL/SandboxieInstall.exe
.exe windows:4 windows x86 arch:x86

0480a155f28743e39420036f688c9ad3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
FreeLibrary
GetLocalTime
lstrcpyA
GetModuleHandleA
GetProcAddress
LoadLibraryA
lstrcmpA
GetCommandLineA
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Sandboxie 3.46 + serial PL/serial.txt

Sharing

General

Malware Config

Signatures

Files

0480a155f28743e39420036f688c9ad3

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB