fa0d5b18a80ad34bccc71bda45cf2695_JaffaCakes118

General

Target

fa0d5b18a80ad34bccc71bda45cf2695_JaffaCakes118
Size

188KB
MD5

fa0d5b18a80ad34bccc71bda45cf2695
SHA1

b5bd9301f8dcbc4f035cb57820d5c2e7f9d72aef
SHA256

9ece7119555d177f599b4e731e0fc69d52b1ce249849355c959cdb153ec4bfe7
SHA512

7f627340ab23a70db6949134935fa87bd6075fa8f9e4bf04bec755dd710cfd918805b1896ae4eb3d1fc4dc6c063bd7dfa70d2e5341bfeddbcc43c368e483a970
SSDEEP

1536:QPTAviZrA5XrU1DkF4/765trdU4E/uZ30YjgPhcccccccccccVm0:c29C2XtrdUrCF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa0d5b18a80ad34bccc71bda45cf2695_JaffaCakes118

Files

fa0d5b18a80ad34bccc71bda45cf2695_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aeeb4a8c0bccded0c1710eda5146cd6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamA
LoadMenuA

kernel32

HeapCreate
WaitForSingleObject
CreateThread
GetLastError
GetProcAddress
GetModuleHandleA
FindResourceA
CreateProcessA
GetCommandLineA
GetStartupInfoA
WriteProcessMemory
VirtualAllocEx
CloseHandle
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aeeb4a8c0bccded0c1710eda5146cd6b

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 120KB - Virtual size: 117KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 120KB - Virtual size: 117KB

.reloc
Size: 8KB - Virtual size: 4KB