dd320fbf4b27b062980810e6cc1d4bf9_JaffaCakes118

General

Target

dd320fbf4b27b062980810e6cc1d4bf9_JaffaCakes118
Size

48KB
MD5

dd320fbf4b27b062980810e6cc1d4bf9
SHA1

2ff603811511c8dd287e800de9ca28ab3b816262
SHA256

59080247afaede3a469fb1a019fb4b935a268de2b338e9ef2ff3ef345223bad1
SHA512

8d24d37f961c3e67b2b26bf783137c7959e0160c776b328c67d0bf5aab0a31fc27c501f480daf942efbd30336ed35e4243ff1c57e9a2a2b1b8c0c5998d66e439
SSDEEP

768:gUNAhsYFvGPfDfFsoxq/9Uz7oNuniQLMg:2s6vypzxOq3oA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd320fbf4b27b062980810e6cc1d4bf9_JaffaCakes118

Files

dd320fbf4b27b062980810e6cc1d4bf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

227e6fde468e1caf3dc7d74e9285cd84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetExitCodeProcess
CloseHandle
WaitForSingleObject
CreateProcessA
lstrlenA
lstrcpynA
HeapDestroy
GetVersionExA
FlushFileBuffers
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
FreeLibrary
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
LCMapStringW
GetStringTypeA
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
MultiByteToWideChar
LCMapStringA

user32

wsprintfA
WaitForInputIdle
MessageBoxA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

227e6fde468e1caf3dc7d74e9285cd84

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 8KB - Virtual size: 7KB