b65889520baca554fa7fac883b1c438d_JaffaCakes118

General

Target

b65889520baca554fa7fac883b1c438d_JaffaCakes118
Size

49KB
MD5

b65889520baca554fa7fac883b1c438d
SHA1

5d9a7ce1c99038bc739d9fe7b472ce35d1ff40bd
SHA256

a7074c3f8fc1e76c15e4f9cf7b642f6400555315f3dca550198dfcc8e3d18093
SHA512

0fbd9c0888c6f56ae50557370cb4de2df2cd4c44760c2cfacc6de92de341fe2be258b197ef1df725eb59c6a5e6eeea9e59fdfd767db3f5866fa204c64526333c
SSDEEP

768:OrTakW/AUl7MKNlOYfP26aCIW5P+tWwvyu:yTO97M4lOsjaC4tPyu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b65889520baca554fa7fac883b1c438d_JaffaCakes118

Files

b65889520baca554fa7fac883b1c438d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8678b65d5e019b5f43a9f285d8d69d38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetLastError
lstrcatA
ExitProcess
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcpyA
GetEnvironmentVariableA
LoadLibraryA
lstrlenA
GetLocalTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetTickCount
GetTempPathA
Process32Next
SizeofResource
LockResource
LoadResource
FindResourceA
Sleep
GetWindowsDirectoryA
DeleteFileA
CloseHandle
CreateThread
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
RtlUnwind
HeapReAlloc
MoveFileA
GetStartupInfoA
GetCommandLineA
GetVersion
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetVersionExA
HeapDestroy
HeapCreate
WriteFile
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8678b65d5e019b5f43a9f285d8d69d38

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 168KB - Virtual size: 164KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 168KB - Virtual size: 164KB