f9b92a61a4ce778023676b280e2055a4_JaffaCakes118

General

Target

f9b92a61a4ce778023676b280e2055a4_JaffaCakes118
Size

84KB
MD5

f9b92a61a4ce778023676b280e2055a4
SHA1

90d5e2a02bcfa409ed466bfb15bde976a0e9dceb
SHA256

aa280d1501fe41fc5647f67ce103d998addcee139b1d7b659113227376454fe5
SHA512

76c3002714cb7e56e8e2b9e9f5d868b473143fcd0c3476f320a921888b75bb87c6339872419ddb74cb8da92be2954e596b9198e33c1780fd2f139dc5530f618c
SSDEEP

1536:6V/H3+J7ZMYE8kEPhyyPuNHlg9vy747rHea49lx:BG8PQyGFYDx49lx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9b92a61a4ce778023676b280e2055a4_JaffaCakes118

Files

f9b92a61a4ce778023676b280e2055a4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d46d41f49a5cca198e24a3ad7db276b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect
lstrcpyA
WinExec
GetLocaleInfoA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
RtlUnwind
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InterlockedExchange
VirtualQuery
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemInfo

user32

wsprintfA

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d46d41f49a5cca198e24a3ad7db276b0

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 4KB - Virtual size: 35KB

.rsrc Size: 8KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 4KB - Virtual size: 35KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 1KB