b8c1c90d8e31b5029c3d548d752a1067_JaffaCakes118

General

Target

b8c1c90d8e31b5029c3d548d752a1067_JaffaCakes118
Size

237KB
MD5

b8c1c90d8e31b5029c3d548d752a1067
SHA1

21f20f618d927e110027e07ed34d1bc21ed0433a
SHA256

2757539ce070e8d121ad6536b7bb3b91f534d55dfc437190aa7f81f39017ac32
SHA512

46bd440ab33ca571c3dd81b7397a6445533529952337b850ab45c1cf013deb55083bf3d5b8c671f253cd656ffef8882b95cf9a26474d33c793fa7325b5b1e64f
SSDEEP

6144:XEa0m5X7ccwrh00sYYGPyEd/xvv4CxNDQfYK2:XEa0OXollpJWm/xX44DQfq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8c1c90d8e31b5029c3d548d752a1067_JaffaCakes118

Files

b8c1c90d8e31b5029c3d548d752a1067_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5e5aee77d6212bd5d98d1d915c25199f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
GetProcessHeap
GetLastError
GetProcAddress
LoadLibraryA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
RtlUnwind
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize

user32

MessageBoxA

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e5aee77d6212bd5d98d1d915c25199f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 101KB - Virtual size: 101KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 120KB - Virtual size: 123KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 101KB - Virtual size: 101KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 120KB - Virtual size: 123KB

.rsrc
Size: 5KB - Virtual size: 4KB