cf328a30139c8867156816c1a9ffe76d_JaffaCakes118

General

Target

cf328a30139c8867156816c1a9ffe76d_JaffaCakes118
Size

30KB
MD5

cf328a30139c8867156816c1a9ffe76d
SHA1

713a2ab9dce9ef747bbc5844bcdf4c9788385f6c
SHA256

4d1496f256fc8f10d08d08a24bbcc0a1dae505dd8c114dfe71f0c8f0e417d41b
SHA512

8029a60e269dd27e8a5e74fec9e557efdd537aaad587b34e095c5e5259c4a44cbcf367c087194b0afd47f0a523280a76b069c1377e2fc7ddb1f2ed7141de757e
SSDEEP

768:6IgNHRHaTk2GJIXHkNIJ7wKuloTeI5Pv:6IgN5aTFAIXHkN47uAJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf328a30139c8867156816c1a9ffe76d_JaffaCakes118

Files

cf328a30139c8867156816c1a9ffe76d_JaffaCakes118
.exe windows:6 windows x86 arch:x86

8c72aee2eabb36ff7be0f7a9f695344d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

GettingStarted.pdb

Imports

kernel32

GetLastError
GetCommandLineW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

AllowSetForegroundWindow

msvcrt

memset
__getmainargs
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit

ntdll

WinSqmAddToStream

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

shell32

ShellExecuteExW

shlwapi

PathGetArgsW
StrCmpW
UrlGetPartW

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8c72aee2eabb36ff7be0f7a9f695344d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcrt

ntdll

ole32

shell32

shlwapi

oleaut32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 20KB - Virtual size: 20KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 20KB - Virtual size: 20KB