efc47ce871d1cb41733a33195416b182_JaffaCakes118

General

Target

efc47ce871d1cb41733a33195416b182_JaffaCakes118
Size

116KB
MD5

efc47ce871d1cb41733a33195416b182
SHA1

7da93df8014151391e90a7896b7b02e67acc5c56
SHA256

50c2ec80e2fa6c28f5bbdff29f116478c1abb97d0c624171cfacfc41f628b5e6
SHA512

4998fd9c1a1f11127a678556644838090e440589237b00011999f5bbbbba1ad9a1679e304d815889a276fc8b8b645351041308378a2bf347b848787d0f08744d
SSDEEP

3072:nW3KObeUxp/QWYPekcggPQ5mMHrDdAcg7:Q3beUDYKo5RdAc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efc47ce871d1cb41733a33195416b182_JaffaCakes118

Files

efc47ce871d1cb41733a33195416b182_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f4b2b776896c9620e68b018c837d942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
VirtualAllocEx
GetTickCount
GetLastError
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
CloseHandle
InitializeCriticalSection
Sleep
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CreateFileA

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2f4b2b776896c9620e68b018c837d942

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 136KB - Virtual size: 141KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 136KB - Virtual size: 141KB