bcf6529152e03e91b3b093e2f54cf909_JaffaCakes118

General

Target

bcf6529152e03e91b3b093e2f54cf909_JaffaCakes118
Size

66KB
MD5

bcf6529152e03e91b3b093e2f54cf909
SHA1

0176930c973f0f37730b1a3a964b0f67ccecc09f
SHA256

8691cb362ca41ee6450f6cefdda49749cadabfa8952bc1939309990ff4a89531
SHA512

0099db3d4e37b01fd11e8f23e5956764c2b449414f207513eba41170ee5fcb4b83ef25012c417f1288383d341eed4fb9d489e7ad412744a0bb7a0aea2c2b4ff1
SSDEEP

768:odk9Ryp6K6FnkEAeJNvxzk8mexWlNCoYvITUkDjh4IYL25kcCSO3wyMCqrP/GsDj:Gk9ip6GErJNZT7YlN2w0IYt0C+JbWfw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcf6529152e03e91b3b093e2f54cf909_JaffaCakes118

Files

bcf6529152e03e91b3b093e2f54cf909_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54a4a5db7d3ae131281738624b6e8efd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GlobalAlloc
GetTickCount
CancelWaitableTimer
ExitProcess
lstrcatA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
SetStdHandle
HeapSize
LCMapStringA
MultiByteToWideChar
GetSystemInfo

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54a4a5db7d3ae131281738624b6e8efd

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 640B

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 640B