f0173642fe7fb6c310d9b5d6196385b3_JaffaCakes118

General

Target

f0173642fe7fb6c310d9b5d6196385b3_JaffaCakes118
Size

317KB
MD5

f0173642fe7fb6c310d9b5d6196385b3
SHA1

eb353a2bdcf63918dc1b9a8bde35df5cf9857c65
SHA256

2e0eca4db73637457ed8601b9644f5fb89fa6f173e739eb74f87b5e5e9a0196f
SHA512

03dac8e9e7f266ebe986065459c63bbfb1fdf9c699dbc5ab4735e4712211f7815c80e9174189aae97e090fbaaceed1405f04b3745d8c28a268ee3c9488bed739
SSDEEP

6144:AhyqniLTaJB1iqbswTTn78oH0MdyPKS2jpuJFPeSgIkeaE:AhNS4BjgEH0Mdy72jQJ9eWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0173642fe7fb6c310d9b5d6196385b3_JaffaCakes118

Files

f0173642fe7fb6c310d9b5d6196385b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

602027ab49a6504d3b57a70ad9ace780

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
GetLastError
OpenMutexA
CreateMutexA
CloseHandle
VirtualAlloc
ResumeThread
CreateThread
Sleep
GetProcAddress
VirtualFree
GetModuleHandleA
ExitProcess
GlobalAlloc
SuspendThread
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
VirtualQuery

user32

SetTimer
GetDC
LoadCursorA
GetCursorPos
GetDesktopWindow

msvfw32

DrawDibChangePalette

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

602027ab49a6504d3b57a70ad9ace780

Headers

File Characteristics

Imports

kernel32

user32

msvfw32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 252KB - Virtual size: 251KB

.rsrc Size: 33KB - Virtual size: 373KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 252KB - Virtual size: 251KB

.rsrc
Size: 33KB - Virtual size: 373KB