d644b493f733d4987656eb0788a8f9cd_JaffaCakes118

General

Target

d644b493f733d4987656eb0788a8f9cd_JaffaCakes118
Size

210KB
MD5

d644b493f733d4987656eb0788a8f9cd
SHA1

952951a88d360fe75ec8d4ea3283b88b4779bc36
SHA256

92e88f59e1c609656e59cd83544d532ab21c4d0cd1dbd24e55c704d9b77030f6
SHA512

e776c26442dbf888446b5e706787f3e8f91132e66797f2956b4fcc920bc6f5a86280f079e8a12774e9922948cb7559f05038ce22dffb0edd3a32ce4f380eb54d
SSDEEP

3072:YfklJDVuRaBGCxwz/Lpk1IM8BfMQ+C4urZEuFbfmHosdImuTVtAckncR+S90wXJT:MdyV7pDYqCrOKizd+qkQRucIzpjhF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d644b493f733d4987656eb0788a8f9cd_JaffaCakes118

Files

d644b493f733d4987656eb0788a8f9cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b16981ecb482b783a5f157d591b7de4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle
CloseHandle

shell32

ShellExecuteA

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b16981ecb482b783a5f157d591b7de4

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 152KB - Virtual size: 152KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 13KB - Virtual size: 18KB

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 152KB - Virtual size: 152KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 13KB - Virtual size: 18KB

.rsrc
Size: 40KB - Virtual size: 39KB