e13d440d5ab0572872afb77c63cb8094_JaffaCakes118

General

Target

e13d440d5ab0572872afb77c63cb8094_JaffaCakes118
Size

338KB
MD5

e13d440d5ab0572872afb77c63cb8094
SHA1

77e6174a48837c82dacc994d1029c17392937589
SHA256

d2b5925d3e20120ed391e6da940aae02770b7c397ea2b754b72904a73a64586f
SHA512

d204726c1641a8f610d4561fc206ce3ef6a0ff715c34a58f3a8239d28e68bbab01ea411beda5faa764ac2a2b93e9540fd73c75c7391bea46e9e4487e162fda5b
SSDEEP

6144:bqbbMrIjKsRLIvQCQUBhaKHlLBtYlcwhbEU+rOHcXxepgXZ1HBiKR2TbR36Vg:mfM/0nvU9F/IcPUiXx+wL52Tbxsg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e13d440d5ab0572872afb77c63cb8094_JaffaCakes118

Files

e13d440d5ab0572872afb77c63cb8094_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b86ee1262a5c7599443584c6056463be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetCurrentProcess
VirtualAllocEx
GetLastError
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
CloseHandle
InitializeCriticalSection
Sleep
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CreateFileA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b86ee1262a5c7599443584c6056463be

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 280KB - Virtual size: 286KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 280KB - Virtual size: 286KB