fb2d1c824423be558f7cf19aea3d875e_JaffaCakes118

General

Target

fb2d1c824423be558f7cf19aea3d875e_JaffaCakes118
Size

861KB
MD5

fb2d1c824423be558f7cf19aea3d875e
SHA1

472a3c199493d97c8558b4c5cb5362455e9c5f67
SHA256

15869591f3e604538c7b44b88bfdb85166d99ee593a9dbd7d3a5d00b7f23c725
SHA512

7b0e96c0d23f434229e59ba0c18128f58dabcc99ecaeb00930b9dc836a0aee9eb5c85f0c0e12a612194224b2ee2246af4bcd53c601111f5aa42012eb1d4a36a2
SSDEEP

12288:RfCOynsOT3JLZTR6MubEi0eytn9ExBtN3ghxoug2ICIeTBBWENaj0OOl1nNsd:RfmZLZT4MuyLt9gtCru+IeNBWtj0Ol

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb2d1c824423be558f7cf19aea3d875e_JaffaCakes118

Files

fb2d1c824423be558f7cf19aea3d875e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3fd33252d11bb05878072641343091ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit

kernel32

WriteFile
GetStartupInfoW
GetStringTypeW
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
IsValidCodePage
CreateDirectoryW
FindResourceExW
GetModuleHandleW
LoadLibraryExW
CreateEventW
TlsAlloc
SystemTimeToFileTime
GetSystemInfo
GetLocalTime
GetProcAddress
GlobalAlloc
VirtualAlloc
GetCurrentProcessId
ExitProcess
GetCurrentThreadId
GetLastError
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetHandleCount
GetStdHandle
GetSystemTime
CloseHandle

psapi

GetModuleFileNameExW
GetMappedFileNameW
GetModuleBaseNameW

shell32

DragFinish
ShellExecuteW
ExtractIconExW
Shell_NotifyIconW
SHGetSpecialFolderPathW

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mi4d
Size: 802KB - Virtual size: 801KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fd33252d11bb05878072641343091ff

Headers

File Characteristics

Imports

msvcrt

kernel32

psapi

shell32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 7.0MB

.mi4d Size: 802KB - Virtual size: 801KB

.rsrc Size: 12KB - Virtual size: 13KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 7.0MB

.mi4d
Size: 802KB - Virtual size: 801KB

.rsrc
Size: 12KB - Virtual size: 13KB