b44a29806e2b8b38ff7ad51164c6cea2_JaffaCakes118

General

Target

b44a29806e2b8b38ff7ad51164c6cea2_JaffaCakes118
Size

97KB
MD5

b44a29806e2b8b38ff7ad51164c6cea2
SHA1

0f1d9eb300ce45b3e397103160adcf9af596562a
SHA256

17aef25158421c1e9b1ca3843ed33c24dd706ded10fdd72214b3169ca49e12c3
SHA512

60d9ca549fa05d95c32b16a05fdc07f84ac45421c17544e58fd9d4690f4df319fb2b59e03e920f119671001e72bcb43baadec42b2bcb11bc8a4f9ec21c801834
SSDEEP

1536:NgNdPyGfrFdlmGYAb74+yKuFd6EGKviXSBg1Jy:wPysn3bBZunImg1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b44a29806e2b8b38ff7ad51164c6cea2_JaffaCakes118

Files

b44a29806e2b8b38ff7ad51164c6cea2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fa5722d554771a624e6238798e1ca1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
WaitForSingleObject
CreateProcessA
GetWindowsDirectoryA
CreateEventA
SetEvent
OpenEventA
ResetEvent
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
CloseHandle
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
ReadFile
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameW
HeapAlloc
VirtualAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
FlushFileBuffers
CreateFileA
LCMapStringA
LCMapStringW
CreateFileW
GetCurrentDirectoryW
SetEndOfFile
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lif
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2fa5722d554771a624e6238798e1ca1a

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 14KB - Virtual size: 19KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 808B

.lif Size: - Virtual size: 1B

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 14KB - Virtual size: 19KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 808B

.lif
Size: - Virtual size: 1B