c281f64dc50e4a907484ba8cf35c364d_JaffaCakes118

General

Target

c281f64dc50e4a907484ba8cf35c364d_JaffaCakes118
Size

49KB
MD5

c281f64dc50e4a907484ba8cf35c364d
SHA1

4cd37a4ab1dd09ef034a297919cbd4ea1006dfeb
SHA256

20ef2c4584bc8ea0f7d889e5c4d895c0b179b09ffe8079baf08036554d2ff9b0
SHA512

1182a0ef053df1dac14a70a7d146a3b91fc5d70c3decfa61fa175fe13a02d3152b668937d0d5b54c2840e21f42b18c2b1ca102c1c08804ac8adf384b81e099fd
SSDEEP

768:Hk5D0/LA+ffGWRlsYSF+054Ne3tQ/yHrFm:WDgA+fIYS8ctoyHrw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c281f64dc50e4a907484ba8cf35c364d_JaffaCakes118

Files

c281f64dc50e4a907484ba8cf35c364d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53145e7d9c2dca12ec6216474020303d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
WinExec
CopyFileA
lstrcpyA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetTickCount
lstrcatA
GetSystemDirectoryA
ExitThread
SetProcessWorkingSetSize
GetCurrentProcess
CreateProcessA
CreateThread
SetFileAttributesA
GetLastError
CloseHandle
ReleaseMutex
OpenMutexA
GetTempPathA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetEnvironmentVariableA
GetShortPathNameA
WaitForSingleObject
ExitProcess
CreateMutexA
lstrlenA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
HeapAlloc
TerminateProcess
RtlUnwind
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
SetFilePointer
GetStdHandle
WriteFile
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53145e7d9c2dca12ec6216474020303d

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 13KB - Virtual size: 18KB

.rsrc Size: 1024B - Virtual size: 816B

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 13KB - Virtual size: 18KB

.rsrc
Size: 1024B - Virtual size: 816B