fd3d58458f053bc15fc855eda6a3e5ef_JaffaCakes118

General

Target

fd3d58458f053bc15fc855eda6a3e5ef_JaffaCakes118
Size

392KB
MD5

fd3d58458f053bc15fc855eda6a3e5ef
SHA1

2e39764c9f79192d6f2aecaaa7c5d06eae4f4263
SHA256

412d3afe3a96c2f2489c56a4dadb7a19166224ff20435d238e2e1f7bb8ba2fe8
SHA512

c39abd2abcce4f92cd88b2a778f74aa670d64e4d238a4eda299bb757706966eb73c2a0804ab188579c089b0ae7f4b7d33f5e69cfe121a3523eb99f25d30b487e
SSDEEP

12288:LAadCqFfIhsEFxmCBkXU3c+RJ/yJH4UzfS:LAadCqFPSVgs3+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd3d58458f053bc15fc855eda6a3e5ef_JaffaCakes118

Files

fd3d58458f053bc15fc855eda6a3e5ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce1201274cf768bd49cfddc168efb21c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
SHInvokePrinterCommandA

gdi32

RestoreDC
PlgBlt
GetWinMetaFileBits
StartDocW
SetTextJustification
GetKerningPairsW
GetTextCharset
SetBkMode
GetCharABCWidthsFloatW
CreateRectRgn
GetMapMode
StrokeAndFillPath
GetDeviceGammaRamp

kernel32

TlsSetValue
LeaveCriticalSection
FlushConsoleInputBuffer
SetHandleCount
MultiByteToWideChar
HeapReAlloc
LoadLibraryA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCurrentProcess
GetCPInfo
LCMapStringW
GetFileType
GetCurrentThread
GetCurrentProcessId
VirtualFree
WideCharToMultiByte
GetStdHandle
LCMapStringA
TerminateProcess
RtlUnwind
VirtualQuery
HeapAlloc
QueryPerformanceCounter
HeapFree
HeapCreate
ExitProcess
VirtualAlloc
IsBadWritePtr
GetTickCount
TlsFree
TlsGetValue
TryEnterCriticalSection
CreateNamedPipeW
GetLastError
GetStartupInfoA
GetModuleHandleA
ConnectNamedPipe
GetEnvironmentStringsW
SystemTimeToFileTime
GetOEMCP
HeapDestroy
UnhandledExceptionFilter
DeleteCriticalSection
SetLastError
EnterCriticalSection
GetACP
GetStringTypeA
GetProcAddress
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
FreeEnvironmentStringsA
GetModuleFileNameA
GetVersion
GetStringTypeW
TlsAlloc
InitializeCriticalSection

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce1201274cf768bd49cfddc168efb21c

Headers

File Characteristics

Imports

shell32

gdi32

kernel32

Sections

.text Size: 103KB - Virtual size: 103KB

.rdata Size: 3KB - Virtual size: 31KB

.data Size: 275KB - Virtual size: 275KB

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 3KB - Virtual size: 31KB

.data
Size: 275KB - Virtual size: 275KB

.rsrc
Size: 9KB - Virtual size: 8KB