fe0ff08a874407a5f5da8c0d90d4c016_JaffaCakes118

General

Target

fe0ff08a874407a5f5da8c0d90d4c016_JaffaCakes118
Size

224KB
MD5

fe0ff08a874407a5f5da8c0d90d4c016
SHA1

4fa8ef2ea6b5374258e6b33bb688477d880f7d6d
SHA256

45300909670066c2c5e42c8bcdb0277031652860197c2cdb07f154ee8b4048fb
SHA512

1e9b85f2d5b47ca4128659b79b4857577821bde601724e610034480ae0604e6212e224ae9eff4486ba151070beaf356fc83465efd4bb3f717dde4cdbc52906b1
SSDEEP

6144:yMS/i8nBCfFkz6n4N0OE/I19hYREEQlKzrU:y5i8nBSn4NxzVEGOA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe0ff08a874407a5f5da8c0d90d4c016_JaffaCakes118

Files

fe0ff08a874407a5f5da8c0d90d4c016_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddc8d7e542da9cc18e7148eee196334d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
DeleteFileA
VirtualFree
VirtualAlloc
OpenMutexA
GetSystemDirectoryA
FlushFileBuffers
GlobalLock
Sleep
GetCurrentThreadId
LoadLibraryA
GetProcAddress
VirtualProtect
GetModuleHandleA
LocalSize
ResetEvent
FindFirstFileA
CloseHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
HeapFree
HeapCreate
HeapDestroy
GetSystemInfo
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType

user32

GetSysColorBrush
LoadCursorA
GetDesktopWindow
GetTopWindow
GetClientRect
GetCursorPos
SetTimer
ReleaseDC
GetParent
CreateIcon
IsIconic
SetCursorPos
GetWindowRect
SetCursor
GetWindow
GetDC

shell32

DuplicateIcon

psapi

EnumProcessModules

msvfw32

DrawDibRealize
ICOpen

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddc8d7e542da9cc18e7148eee196334d

Headers

File Characteristics

Imports

kernel32

user32

shell32

psapi

msvfw32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 36KB - Virtual size: 35KB

.rsrc Size: 156KB - Virtual size: 153KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 156KB - Virtual size: 153KB