b5e44a71051888057f37420fcf852da5_JaffaCakes118

General

Target

b5e44a71051888057f37420fcf852da5_JaffaCakes118
Size

349KB
MD5

b5e44a71051888057f37420fcf852da5
SHA1

596bff5f79cafd284cfb2aeb9730860b4467d47c
SHA256

4bc2f2af5ebe4b4ef0469c77f580baf6f510fe401c8b401f30c025f5da745994
SHA512

5bde23a87d85a9db1b7ed5002f7edac3bfa88ecd5306959ea2457c0e6598523c59911131241a60ec352e1c17fcc6462804f425b7a5f9efe0c6b1ea2d82eaf8b5
SSDEEP

6144:vUpl90WU94+UVnG/+rzvsrJMtC0SyLyHXP/aJtMTyotZ96pIIH:vUphUCw2Pvs6CyLy/pltvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5e44a71051888057f37420fcf852da5_JaffaCakes118

Files

b5e44a71051888057f37420fcf852da5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dcf96e2d77511893a7744cea9bf7dd7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
Sleep
LocalAlloc
GetLastError
GetSystemTime
VirtualAlloc
GetModuleHandleW
VirtualFree
GetProcAddress
lstrcmpiA
LoadLibraryA
GetModuleHandleA
VirtualProtect
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceW
CloseHandle
WriteFile
lstrlenA
CreateFileA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
GetSystemInfo
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo

user32

KillTimer
GetDesktopWindow
MessageBoxA
MessageBoxW
CreateIcon
LoadCursorW
PostQuitMessage
GetCursorPos
SetTimer
IsIconic
GetWindowRect
SetCursorPos
SetCursor

shlwapi

StrStrIW

ws2_32

getprotobynumber
WSAGetLastError

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 318KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcf96e2d77511893a7744cea9bf7dd7d

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

ws2_32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 318KB - Virtual size: 355KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 318KB - Virtual size: 355KB