f5288b36d8daeb75353f085c6432c862_JaffaCakes118

General

Target

f5288b36d8daeb75353f085c6432c862_JaffaCakes118
Size

14KB
MD5

f5288b36d8daeb75353f085c6432c862
SHA1

8e31f2a80cc38c700b4353822640900772691c22
SHA256

068823fbb04562d2722258d8dd44e1d9ca93c32c642ff11c347e51324581e6da
SHA512

be51eb6565f53119af89fa7574d5407f408ae7c6b936c472a2cf0e179d6a074bc696aa3725a0b4ce6d323cae3d8a36eb577dce94b4381065a5708d1048db9b95
SSDEEP

384:JM+LXmGPztOrXHjXLmbRCllAyIj+yQscERPFmSd61Z6:JMmImEAxiyQFkQSd8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5288b36d8daeb75353f085c6432c862_JaffaCakes118

Files

f5288b36d8daeb75353f085c6432c862_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d93408c61c6af269e1b0274114937dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
HeapFree
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
lstrcatA
ExitProcess
MultiByteToWideChar
GetSystemDirectoryA
DeleteFileA
SetFileAttributesA
MoveFileA
CloseHandle
lstrlenA
SizeofResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
GetLocalTime
GetTempPathA
lstrcpyA
lstrcmpiA
SetLastError
GetFileAttributesA
lstrcmpA
ReadFile
SetFilePointer
GetModuleFileNameA
SetUnhandledExceptionFilter
Sleep
ReleaseMutex
CreateMutexA
GetCommandLineA
CreateThread
GetCurrentThreadId
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA

msvcrt

??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strchr
malloc
realloc
_except_handler3

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d93408c61c6af269e1b0274114937dc

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 67KB - Virtual size: 67KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 67KB - Virtual size: 67KB