b209d901b9199b16388dfbd21608e67d_JaffaCakes118

General

Target

b209d901b9199b16388dfbd21608e67d_JaffaCakes118
Size

899KB
MD5

b209d901b9199b16388dfbd21608e67d
SHA1

933f298ffeb71a0110995d8c3f809a145fbb5217
SHA256

7575260e9c8de3fc5270d4598c71dc63997f15eab1b3788a36b41744d89cdf74
SHA512

fb1f7647bde96700ad51eb98683123ae12efa8f3c77d95a6ffd817f2c76bbcad432b9fb93fcad2b189a6ca3f497a9a2073931ba5090376c50164471b85358db0
SSDEEP

6144:vaBTfFDbRnOTrAD5NYbMIF8XIwMG0JR5EJWmQJONPAG2C+kWpRFq9IBM/DDy+3zW:vK5OkNUJbPJfEJGWxICIBM/Dmb4s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b209d901b9199b16388dfbd21608e67d_JaffaCakes118

Files

b209d901b9199b16388dfbd21608e67d_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

5f1e52b4084dbe28f7315d07d9fbdcf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetProcAddress
LoadLibraryA
IsBadWritePtr
MultiByteToWideChar
InterlockedDecrement
GetModuleFileNameA
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
HeapFree
HeapAlloc
GetCommandLineA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetVersion
GetStartupInfoA
RaiseException
RtlUnwind
HeapReAlloc
lstrcpynA
GetLastError
LocalFree
SetFilePointer
WriteFile
CloseHandle
WideCharToMultiByte
lstrlenA

user32

LoadCursorA
LoadIconA
CreateWindowExA
ShowWindow
DrawTextA
RegisterClassExA
EndDialog
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
DefWindowProcA
DestroyWindow
DialogBoxParamA
SetTimer
KillTimer
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA

ole32

CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoInitialize

oleaut32

VariantInit
SysFreeString
SysAllocStringLen
SysAllocString
VariantClear

Sections

.text
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5f1e52b4084dbe28f7315d07d9fbdcf7

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

Sections

.text Size: 512KB - Virtual size: 512KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 512KB - Virtual size: 512KB

.rsrc
Size: 16KB - Virtual size: 16KB