b95df55f4fcfded6082c36a1f645e2c2_JaffaCakes118

General

Target

b95df55f4fcfded6082c36a1f645e2c2_JaffaCakes118
Size

60KB
MD5

b95df55f4fcfded6082c36a1f645e2c2
SHA1

94d012f842e1ac721a0a199a81ad15c571db3d60
SHA256

88ccf25844e7201c2f2706a37f71f479ad1968f7c10c098f464ac57935e378d8
SHA512

fdc4cfd9380fd75f37aa955fb32789912b3b87640b96b4de11445b8f1e17ab004e2e6f00be9b4d189799842c4d28e4266b3c3103be4422b746a68a20c20324ad
SSDEEP

768:MeQES/g199oxL5jxkE8kp5uva+66vssr4an010H5+BInknzN7QzTGfLQ:M7ES/qdEj+hVZiInAQkQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b95df55f4fcfded6082c36a1f645e2c2_JaffaCakes118

Files

b95df55f4fcfded6082c36a1f645e2c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bcfbba1c45f90890e84cd040007ad6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
CreateDirectoryA
SetFileAttributesA
GetWindowsDirectoryA
GetVolumeInformationA
GetLocaleInfoA
GetModuleFileNameA
GetEnvironmentVariableA
Sleep
CreateFileA
GetFileTime
CloseHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocalTime
DeleteFileA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
GetStartupInfoA
GetLastError
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetConsoleMode
GetConsoleOutputCP
WriteFile
SetStdHandle
ReadFile
GetConsoleCP
SetFilePointer
SetConsoleCtrlHandler
MultiByteToWideChar
WideCharToMultiByte
SetEndOfFile

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5bcfbba1c45f90890e84cd040007ad6b

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 33KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 17KB - Virtual size: 17KB

.text
Size: 33KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 17KB - Virtual size: 17KB