eba5668a6acde27c26267c1623edd291_JaffaCakes118

General

Target

eba5668a6acde27c26267c1623edd291_JaffaCakes118
Size

236KB
MD5

eba5668a6acde27c26267c1623edd291
SHA1

234fb653884af08fc680f0c7d52b375541bde8e0
SHA256

82ef0f2f4d9a27db2bf116c68a83da8dfca503240b18be1da09975aec3d02dc0
SHA512

cb19807de3c5e66339adca70b363d50de7fe39074ffd6e0b096d778535ee34f0ed7dc274685aeacc9829277abf1df9a533526010412a19036cf841d39dc5b77d
SSDEEP

6144:bFJytojaCPQ44VrD474nrzaZ2MBK5leow:baCibzrel

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eba5668a6acde27c26267c1623edd291_JaffaCakes118

Files

eba5668a6acde27c26267c1623edd291_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75e10788fed7aca028b131c9506822cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
GetModuleHandleA
Sleep
GetTickCount
GetProcAddress
LoadLibraryA
VirtualAlloc
GetModuleFileNameW
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75e10788fed7aca028b131c9506822cc

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 10KB - Virtual size: 12KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 10KB - Virtual size: 12KB

.reloc
Size: 2KB - Virtual size: 1KB