fb14c54ba1a1c019bf9ac10a0a866859_JaffaCakes118

General

Target

fb14c54ba1a1c019bf9ac10a0a866859_JaffaCakes118
Size

202KB
MD5

fb14c54ba1a1c019bf9ac10a0a866859
SHA1

32aa84db80740cdaf6dd02d8255ef77ee4c81067
SHA256

1d60f716e370acb374e92345b845bda2a0238d5ec3b5f6cf76d7100f45197b35
SHA512

1fbd3d9867c8215b476dd333313e11a31dbdf6ccac0be2fa66a3acb12ad88d1818471b9def4fcccfe2c1283d5a11cd72c64c87ebc7d1a59fcb6157c8cdb1667a
SSDEEP

3072:NPyB6lYB/6/7pSLWlFVLK8wXPY6pORjY1pMblxS5xLPT5Df9Uis:Nu9B/07wWfKZPjiZyPT5Dfbs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb14c54ba1a1c019bf9ac10a0a866859_JaffaCakes118

Files

fb14c54ba1a1c019bf9ac10a0a866859_JaffaCakes118
.exe windows:4 windows x86 arch:x86

605dd60a55b7f0b8699cff5e9a7b8303

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetProcAddress
LoadLibraryA
GetSystemTime
GlobalAlloc
GetModuleFileNameA
GetModuleHandleA
Sleep
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
HeapReAlloc
RtlUnwind
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
GetSystemInfo

user32

CreateWindowExA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

605dd60a55b7f0b8699cff5e9a7b8303

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 148KB - Virtual size: 146KB

.rsrc Size: 24KB - Virtual size: 22KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 148KB - Virtual size: 146KB

.rsrc
Size: 24KB - Virtual size: 22KB