c1d302bb83df9efcd7132889bdc5b57c_JaffaCakes118

General

Target

c1d302bb83df9efcd7132889bdc5b57c_JaffaCakes118
Size

820KB
MD5

c1d302bb83df9efcd7132889bdc5b57c
SHA1

39e3512ed4b0c967d7d33f0067772d928bbf84af
SHA256

3668ec834e9a1cd33e03b2ae219f9b8f7d8ffb2088b9d15ec2258cc4bc491f3b
SHA512

aa06cdc6771efb9c731dd962e3ac7e2dbb2304ecd093cff05eabb02f4ce7039e3f8c93faf6394d9233266bde7dd5205823695f50f5dd49fd8b2abac76cc1ee03
SSDEEP

12288:Jzeqj5jm4Xq+Ry71px3y6k8AUK3fHJSJnjGHKR/zzfQ1WdsKxhtav/ydz:JdmqzRN6k83KxgKHIvQ81H4/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1d302bb83df9efcd7132889bdc5b57c_JaffaCakes118

Files

c1d302bb83df9efcd7132889bdc5b57c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af898d43161747f74c55cc2a409a28bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Soft\mogurance.dbg

Imports

kernel32

GetModuleHandleW
ReadFile
GetProcAddress
LoadLibraryA
GetCurrentThread
TerminateThread
ResumeThread
GetModuleHandleA
GetLastError
CloseHandle
InterlockedExchange
WriteConsoleA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
WaitForSingleObject
CreateMutexA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
CreateFileA

ws2_32

send

msacm32

acmFormatDetailsA
acmFormatEnumA

avifil32

AVIFileInit

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 776KB - Virtual size: 780KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af898d43161747f74c55cc2a409a28bb

Headers

File Characteristics

PDB Paths

Imports

kernel32

ws2_32

msacm32

avifil32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 776KB - Virtual size: 780KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 776KB - Virtual size: 780KB

.rsrc
Size: 8KB - Virtual size: 7KB