fafa0dcc96b0fcd531274454eb0d4314_JaffaCakes118

General

Target

fafa0dcc96b0fcd531274454eb0d4314_JaffaCakes118
Size

236KB
MD5

fafa0dcc96b0fcd531274454eb0d4314
SHA1

f08c071e352ae80a256020f9d70100c4ea8122a1
SHA256

50fe04985b746f8f9578615261e0f50449b788870694ca9239bcd2e935a2caa0
SHA512

2929350f46174d99d3f116d586e23dad0938b77c40a3355000304fdabc1f637cbdbb10542ebb584df91a754360d811ee56aae17e72123a4bfd1f275ab20c3023
SSDEEP

6144:L1u6Ad+cOhbjBGENBCrVMzhHITM9YerVb4Nk:L1TAd+DV9GEarVSHYMdrVbQk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fafa0dcc96b0fcd531274454eb0d4314_JaffaCakes118

Files

fafa0dcc96b0fcd531274454eb0d4314_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fa963681b7c71122cdce494101f6c69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetProcAddress
GetModuleHandleA
Sleep
LoadLibraryA
ExitProcess
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoW
GetVersion
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
WriteFile
GetModuleFileNameA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
RaiseException
LCMapStringA
LCMapStringW
GetLastError
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fa963681b7c71122cdce494101f6c69

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 176KB - Virtual size: 172KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 176KB - Virtual size: 172KB