f99c6b8916970790bdfaa6c3b7f5799f_JaffaCakes118

General

Target

f99c6b8916970790bdfaa6c3b7f5799f_JaffaCakes118
Size

92KB
MD5

f99c6b8916970790bdfaa6c3b7f5799f
SHA1

9a3a0eb2ef5478e5dff5c600baae17e35625fb29
SHA256

afe34d76501cc9f5ceaa63762d3ff1fe3f2a942789e5dd5b57bcf2108221d37b
SHA512

b4014aa2eb5eefd4e5bad3550b5b794b78847071316cd19f2f52e08701702734f861111f6665465afe6c4153d406c79919bd65b1c704bae31b8a9a9a0f95002a
SSDEEP

1536:8egUlduyTu8OJJMr0lwRMidtn+jm/KA1UN2c6LsJ4CjEbgtxs+jozA9ibVGG4m/:FgmPOMAlwRPPXKAyN2c6LqbtxnozAcVh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f99c6b8916970790bdfaa6c3b7f5799f_JaffaCakes118

Files

f99c6b8916970790bdfaa6c3b7f5799f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

090e02e846d0b1b0d3a67c8c6401a13a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
lstrcatA
CloseHandle
lstrcpynA
GetModuleHandleA
lstrcpyA
LoadLibraryA
GetCommandLineA
TlsGetValue
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTime
GetModuleFileNameA
MultiByteToWideChar
GetProcAddress
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
GetStringTypeW

user32

GetQueueStatus
KillTimer

gdi32

CreateCompatibleDC

comdlg32

ChooseFontA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

090e02e846d0b1b0d3a67c8c6401a13a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 64KB - Virtual size: 61KB

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 64KB - Virtual size: 61KB