e252e479b0935ca5866456bf6aadd6ab_JaffaCakes118

General

Target

e252e479b0935ca5866456bf6aadd6ab_JaffaCakes118
Size

368KB
MD5

e252e479b0935ca5866456bf6aadd6ab
SHA1

f4608d07f6fb75f8caf6df09c824b07003337cc9
SHA256

92b59c0d37b0e0a9ea0161653ea116a93c1580a9c8d5b94d7df2a8acca6a5245
SHA512

996c9a900e536eab557fd7033cbd7566b1a166d4cfa5283a5525ac076aff0944ce4620fb63bcd5b235c096921f387b3145357ead4345513fec4b569cafcfc75f
SSDEEP

1536:mZ2aSm3pxoxL7bNY6OQvxGaOWYU0ZND3OUL3MpkJm2CfujMB5f:mZIm5xox3bNYpQvDhYjrDe83jJmBzF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e252e479b0935ca5866456bf6aadd6ab_JaffaCakes118

Files

e252e479b0935ca5866456bf6aadd6ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

299ebe882a71d075c63aaa50807cdc76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
CloseHandle

user32

GetDlgItemTextA
MessageBoxA
SetDlgItemTextA
EndDialog
SendMessageA
GetDesktopWindow
GetWindowRect
SetWindowPos
LoadIconA
DialogBoxParamA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nrdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

299ebe882a71d075c63aaa50807cdc76

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 60KB - Virtual size: 56KB

.nrdata Size: 76KB - Virtual size: 76KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 60KB - Virtual size: 56KB

.nrdata
Size: 76KB - Virtual size: 76KB