d9f586a9ab0090e656e58931a55b5acb_JaffaCakes118

General

Target

d9f586a9ab0090e656e58931a55b5acb_JaffaCakes118
Size

216KB
MD5

d9f586a9ab0090e656e58931a55b5acb
SHA1

dd494327d1b2b9c01daad02f31185a475c0006fb
SHA256

165b5ec86fce4c4e6652aeefca9da2608846ed66204038ec6de65f85e940ab4a
SHA512

41a99ce06e617f307b1b54b7152f02e2e4bf2c10125258a647aa5651e508c9a5ffad1e1781f2134ca75abec56bdc51839727e65aa951f157d44fb38df2d1ba36
SSDEEP

3072:WkTZlJlZXQS+l2Xb5a7HiYDIbHe1ouG5nmTe/xzjdrK06Y383YUZRWhv+2JxuWyw:WaZXQS+G47xieuuGMq/3W883YCRgJgBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9f586a9ab0090e656e58931a55b5acb_JaffaCakes118

Files

d9f586a9ab0090e656e58931a55b5acb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca77b75ec0a55058b09366e08b32220d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
LockResource
SizeofResource
GetTempPathA
VirtualProtect
ReleaseSemaphore
VirtualFree
LoadLibraryA
VirtualLock
VirtualAlloc
IsBadCodePtr
GetProcAddress
GetModuleHandleA
ResetEvent
LocalFree
PulseEvent
CreateFileA
LocalAlloc
CreateEventA
SuspendThread
Sleep
ExitProcess
TerminateThread
GetLastError
VirtualProtectEx
LocalReAlloc
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetStartupInfoA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetSystemInfo

user32

LoadIconA
SendMessageA
DestroyWindow

shell32

SHGetFileInfoA
SHGetMalloc
SHCreateShellItem

msvfw32

DrawDibDraw

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca77b75ec0a55058b09366e08b32220d

Headers

File Characteristics

Imports

kernel32

user32

shell32

msvfw32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 176KB - Virtual size: 175KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 176KB - Virtual size: 175KB