bdfe40f9b8b7fd1a05dad5a1d22609a9_JaffaCakes118

General

Target

bdfe40f9b8b7fd1a05dad5a1d22609a9_JaffaCakes118
Size

157KB
MD5

bdfe40f9b8b7fd1a05dad5a1d22609a9
SHA1

93c24089484b5c4c6a06d1a83c842bd629097818
SHA256

1b468a248df007563d14698be42d9c7b10cc308ff66c713b38a5302546292df3
SHA512

e0ffa33f9cd655417d259899923031d827d49780cda759b275b8b9c9801c15d779144e0aea3dd862dee1834edaa868e33609d751a9a065baa978e0d772966f16
SSDEEP

3072:LTTIwD5MBA7tGHeTt21MmBEtF5F68tvP12Zbho2Ln6:bIhBA7MHI8m0EXvjvP1uDL6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdfe40f9b8b7fd1a05dad5a1d22609a9_JaffaCakes118

Files

bdfe40f9b8b7fd1a05dad5a1d22609a9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f60ab411d629970c080d3bd41d7cd55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
WriteFile
GetLastError
GetProcAddress
LoadLibraryA
OpenMutexA
CreateMutexA
CloseHandle
GetTempPathA
lstrcpyA
lstrcatA
lstrcmpA
RaiseException
GetStringTypeW
FindAtomA
ExitProcess
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
VirtualQuery

user32

ClientToScreen
GetFocus
InflateRect
GetCursorPos
EqualRect
IsWindowVisible
wsprintfA

shlwapi

SHGetValueA

gdi32

GetBkColor

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5f60ab411d629970c080d3bd41d7cd55

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

gdi32

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 110KB - Virtual size: 113KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 110KB - Virtual size: 113KB