c862a6506ed369b4a074bebdf1a91272_JaffaCakes118

General

Target

c862a6506ed369b4a074bebdf1a91272_JaffaCakes118
Size

728KB
MD5

c862a6506ed369b4a074bebdf1a91272
SHA1

e996f59445d141489088cda47d82d316db4f9c5b
SHA256

ada1a53c7c24dd1fd0cea14c57d51870b2cbaaf178bc3523746d32c64ddff990
SHA512

a6bb21f7e81bef2021e217d546ad2190cfc9249486882e14fb65a800a3b93b3b79a5ed7f5dfc708c37ab5a3023b1b7c72b39a71973484ccf15f2a50523e9a074
SSDEEP

12288:hHLty4/pM6oaVsRkiPVNWspkiJqInuIPu9dWU6na5fO7HSaxTf9NylD:PvpoaRKWLBA9m9d56na5GDTh1NylD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c862a6506ed369b4a074bebdf1a91272_JaffaCakes118

Files

c862a6506ed369b4a074bebdf1a91272_JaffaCakes118
.exe windows:4 windows x86 arch:x86

970dc45ebf70a9afa9ba79f096fd6622

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
SetFileAttributesW
CloseHandle
FlushFileBuffers
WriteFile
CreateFileW
LockResource
SizeofResource
LoadResource
FindResourceExW
WaitForSingleObject
CreateProcessW
GetTempFileNameW
GetTempPathW
ExitProcess
GetModuleHandleA
GetStartupInfoW
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 711KB - Virtual size: 710KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

970dc45ebf70a9afa9ba79f096fd6622

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 711KB - Virtual size: 710KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 711KB - Virtual size: 710KB