fc42f56354665d954e132f864dd3d6d5_JaffaCakes118

General

Target

fc42f56354665d954e132f864dd3d6d5_JaffaCakes118
Size

68KB
MD5

fc42f56354665d954e132f864dd3d6d5
SHA1

b9be9e14b67326fca5c3abfddd4efc4d462253a6
SHA256

40ce608db33533e736d946ee4d5ec3131393bc847f96a2e84948bc6e74d6072a
SHA512

687645e4d3f7ef39d515dd761177b8bb6f06f64f80b55457e5025383198ee18b35c225f096e3b7cb1789d9f8b5d1634ecc9cafca4fa5752415685c5774ad70c6
SSDEEP

1536:D1xN8770eiVbQX6zoXNN2h9xfZfjy6DsjVVyHf:ZxNG08UXljXDs3yHf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc42f56354665d954e132f864dd3d6d5_JaffaCakes118

Files

fc42f56354665d954e132f864dd3d6d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d56ecf6340ef5ef4c1c636aa0396ad4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
Sleep
CreateThread
FreeLibrary
GetProcAddress
LoadLibraryA
SetFileAttributesA
GetModuleFileNameA
GetLastError
CloseHandle
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
GetModuleHandleW
GetModuleFileNameW
GetThreadContext
CreateProcessW
OpenProcess
GetCurrentProcessId
WaitForSingleObject
ExitProcess
CreateMutexA
lstrlenA
CopyFileA
GetSystemDirectoryA
GlobalMemoryStatusEx
lstrcpyA
GetComputerNameA
GetLocaleInfoW
LocalAlloc
InterlockedExchange
RaiseException
lstrcatA
ExitThread
TerminateProcess
CreateProcessA
RtlUnwind
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5d56ecf6340ef5ef4c1c636aa0396ad4

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 19KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 19KB