fdf0a3052719a4c12e6d4acd9c3defb4_JaffaCakes118

General

Target

fdf0a3052719a4c12e6d4acd9c3defb4_JaffaCakes118
Size

44KB
MD5

fdf0a3052719a4c12e6d4acd9c3defb4
SHA1

99d2d6deb2fefb9e16a9480073f7046c7ca07416
SHA256

94e6f7ab8ee5d43dd6ea97024c8c4697962d1fd665510cc1f023c27d5365f516
SHA512

7d6966bfd24bf401390d26b4a7daab1a779b4d1700d0a63ff9b2079c47219a27be2882b3061783133ec50f1f15f7876d8f8c001fd28229ae943a8c1b09eaa3df
SSDEEP

384:c9PY0bdbcWW39ZLTG7u9Sg72CkVuCT2yr/l2bNzV98oj7:c9zdwLblSg7hkp2tbxViov

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdf0a3052719a4c12e6d4acd9c3defb4_JaffaCakes118

Files

fdf0a3052719a4c12e6d4acd9c3defb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db4130b110110eb12352b54d635795a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomW
GlobalFindAtomW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryW
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTempPathA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapAlloc
GetStringTypeW

user32

wsprintfA

shell32

ShellExecuteA
SHLoadInProc
SHGetSpecialFolderPathW

ole32

StringFromGUID2
CoCreateInstance

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db4130b110110eb12352b54d635795a4

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 1KB