afd604a85f7ad42799699e5b7cbd1bd5_JaffaCakes118

General

Target

afd604a85f7ad42799699e5b7cbd1bd5_JaffaCakes118
Size

25KB
MD5

afd604a85f7ad42799699e5b7cbd1bd5
SHA1

8022ff2bc6f8f9aa4e09da4914b59677f5051680
SHA256

9bc4cb579dbac9e6d01603fe569aa01133c7a0e45228e3ebaa6c656d0014084e
SHA512

d89035a737a772c1160c2567d2ae66caf94eeeaaa70224e9256695a568c60ffa573dce299caacce679a20e4567e375549d75c4f7da6348b4f073c93bffac210b
SSDEEP

384:xyzFvC5CSRYbgGh7tDYg8aDacIM0Gl/wFVfdr7nnslJsIS+QvJmlK:xyzA5C5LcaDrIM0GloFTXySICsl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afd604a85f7ad42799699e5b7cbd1bd5_JaffaCakes118

Files

afd604a85f7ad42799699e5b7cbd1bd5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aca7a7b8440a52dde41324f63c4230c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualQueryEx
GetThreadContext
CreateProcessA
GetModuleHandleA
VirtualProtectEx
VirtualAllocEx
ResumeThread
ReadFile
GetFileSize
CreateFileA
GetCurrentProcess
Sleep
SetFileAttributesA
CreateThread
GetModuleFileNameA
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
ExitProcess
GetProcAddress
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
TerminateProcess
FreeLibrary

user32

FindWindowA
MessageBoxA
SendMessageA
IsWindow

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aca7a7b8440a52dde41324f63c4230c8

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 186KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 186KB