c0c5d63be531ab231bb92b15d9f509ee_JaffaCakes118

General

Target

c0c5d63be531ab231bb92b15d9f509ee_JaffaCakes118
Size

220KB
MD5

c0c5d63be531ab231bb92b15d9f509ee
SHA1

f3526962a44adf3fdfdf88b45591d60010426a60
SHA256

560dc7f9d158f4d3052405ea1d63417f58de3cb1d32f2a2d60287d5d6dd9db1b
SHA512

efe694ce6a138672cec635445bdb9778c03a350118e8589f7f38106008c49e568d3ab0e16bfef81ba47134a9a200455be254b9e657dbb47641fba38739eff483
SSDEEP

3072:CFyOliBBfzz4/XQARGwbgxkoVJB1qKvGbU3cbImngzzpmw14fygSmi9ciXn22Tz8:CqVzAXHR/g3PrPUBkkO914mn22TRkj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0c5d63be531ab231bb92b15d9f509ee_JaffaCakes118

Files

c0c5d63be531ab231bb92b15d9f509ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0739796d96cbf4fd7f717b7c29aa0325

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateTimerQueue
VirtualUnlock
Sleep
VirtualAlloc
FindClose
LocalReAlloc
VirtualProtect
LoadLibraryA
GetProcAddress
OpenMutexA
GetModuleHandleA
DeleteTimerQueue
ResetEvent
lstrcpyA
VirtualFree
VirtualAllocEx
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
InitializeCriticalSection
GlobalAlloc
GetCurrentProcessId
RtlUnwind
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
GetSystemInfo

user32

LoadIconA
SendMessageA
IsIconic
DestroyWindow
GetDesktopWindow
GetDC
GetCursorPos
SetTimer
ReleaseDC
GetTopWindow
GetWindow
LoadCursorA

gdi32

CreateBrushIndirect
CreateHatchBrush

psapi

GetWsChanges

msvfw32

ICInfo

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0739796d96cbf4fd7f717b7c29aa0325

Headers

File Characteristics

Imports

kernel32

user32

gdi32

psapi

msvfw32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 48KB - Virtual size: 45KB

.rsrc Size: 140KB - Virtual size: 139KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 48KB - Virtual size: 45KB

.rsrc
Size: 140KB - Virtual size: 139KB