cfed09d803a0419e83f5dee78673a441_JaffaCakes118

General

Target

cfed09d803a0419e83f5dee78673a441_JaffaCakes118
Size

208KB
MD5

cfed09d803a0419e83f5dee78673a441
SHA1

08097c64381d4814b498651ea6f199c3088643c7
SHA256

a59841af9e244e406f2956e0a81a9ccb422ad6545349617c6b63c47abb2ba3a5
SHA512

56791b0ff01d0c5229c9107b68acc2a0b8508cc934f6c5a8a8507be500438e41697842e3d9d8bff966fa09056de1b8c90be270d3f9bd92deb3ae88b3a2f95226
SSDEEP

3072:5CmQHftlbKLiUEMSkNSaN/XzgGf8aXpjR5KiXHtIz:ZQHL+L5EhOSO/XzgGUu/Ny

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
cfed09d803a0419e83f5dee78673a441_JaffaCakes118

Files

cfed09d803a0419e83f5dee78673a441_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a8133e452ef81498341cc655eaab13f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawMenuBar
BeginPaint
EndPaint
EnableMenuItem
GetWindowRect
SendMessageA
SetWindowPos
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBeep
LoadIconA

kernel32

QueryPerformanceCounter
CreateFileA
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetProcAddress
VirtualAlloc
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8133e452ef81498341cc655eaab13f5

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 173KB - Virtual size: 172KB

.data Size: 4KB - Virtual size: 90KB

.rsrc Size: 30KB - Virtual size: 29KB

.text
Size: 173KB - Virtual size: 172KB

.data
Size: 4KB - Virtual size: 90KB

.rsrc
Size: 30KB - Virtual size: 29KB