af421bdb47b5e55b8f5cddd795b2973d_JaffaCakes118

General

Target

af421bdb47b5e55b8f5cddd795b2973d_JaffaCakes118
Size

50KB
MD5

af421bdb47b5e55b8f5cddd795b2973d
SHA1

592cd22b9b09eb0a5c066f2f04980af8e0d5e685
SHA256

2f923d59cab2bb2c2a710f4ac91ba7ee7b647b129f55366950cfb00e5549f8a3
SHA512

3fb5d5982cf21234903c103ee616a0a1180b201bb8197d69767bf4a54f7d76157d94343d77e058087ed4d9e0303483f05f1dca309ea99b9c38a261374b0816a8
SSDEEP

768:OC/yu4UG3lWShxAvYL5iMOxSL6MkIIQbncxuVgS:OC/ydUG1pIYL5i5xAngS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af421bdb47b5e55b8f5cddd795b2973d_JaffaCakes118

Files

af421bdb47b5e55b8f5cddd795b2973d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34568719570721fc8056952a9d9b6c66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetStartupInfoA
GetLocaleInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
CreateDirectoryA
GetLocalTime
GetVersion
GetFileAttributesA
HeapFree
CloseHandle
ReadFile
SetFilePointer
HeapAlloc
WideCharToMultiByte
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetLocaleInfoW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
VirtualAlloc
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
GetProcAddress
LoadLibraryA
HeapReAlloc
SetEndOfFile
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
SetEnvironmentVariableW
LCMapStringA
LCMapStringW

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

34568719570721fc8056952a9d9b6c66

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 11KB - Virtual size: 16KB

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 11KB - Virtual size: 16KB

.idata
Size: 2KB - Virtual size: 1KB