be62f7d2508469545140ed10710d1f64_JaffaCakes118

General

Target

be62f7d2508469545140ed10710d1f64_JaffaCakes118
Size

128KB
MD5

be62f7d2508469545140ed10710d1f64
SHA1

398f8ae1a344eea099f4a53548aa4dc8ebe21ba1
SHA256

7cbb6b1f5750c3f9b8cc43cde463efed989c7e8a066e05a6da2e7f8248763a72
SHA512

2c7a65687fd8eccc480d73fd9b8050ae865c3e3665ca1cdeda7995e8a20a08de86dcaf3fd428ea0e08982fab5b2af08dc8c29a1a74cc602534f9438e1408675a
SSDEEP

3072:YLniLDFBqTqMATNOtNvVWXoFFwtGzZlbafsQr:YLniLZE2rNO7Yofcrr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be62f7d2508469545140ed10710d1f64_JaffaCakes118

Files

be62f7d2508469545140ed10710d1f64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dcaad478421cf7d5478e9bef1b35d5cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
RtlUnwind
GetStartupInfoA
GetFileType
GetStringTypeA
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileA
GetProcAddress
LoadLibraryA
SetEndOfFile
GetStdHandle
WriteConsoleW
HeapFree
HeapAlloc
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoW
GetVersion
ExitProcess
GetLastError
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
ReadFile

ws2_32

gethostbyname
sendto
socket
getsockname
shutdown
getpeername
setsockopt
WSAWaitForMultipleEvents

uxtheme

GetThemeTextExtent
DrawThemeBackground
GetThemeBackgroundRegion
CloseThemeData
GetThemeFont

mpr

WNetGetUniversalNameA
WNetGetUserA

crypt32

CertGetCertificateChain
CertVerifyCertificateChainPolicy
CertCreateCertificateContext
CryptDecodeObject
CertFreeCertificateContext
CertCloseStore
CertAddEncodedCertificateToStore
CertDeleteCertificateFromStore
CertFreeCertificateChain

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dcaad478421cf7d5478e9bef1b35d5cf

Headers

File Characteristics

Imports

kernel32

ws2_32

uxtheme

mpr

crypt32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 64KB - Virtual size: 61KB

.data Size: 36KB - Virtual size: 459KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 64KB - Virtual size: 61KB

.data
Size: 36KB - Virtual size: 459KB