febfe22fc5686476ae623de92409924f_JaffaCakes118

General

Target

febfe22fc5686476ae623de92409924f_JaffaCakes118
Size

211KB
MD5

febfe22fc5686476ae623de92409924f
SHA1

0add9216dbad673a116bdfc32de1eb22ec142bfc
SHA256

73e7165d9525a506f05226274a6ad1bbc800e81eeb1409e6cbdf2374fbb43717
SHA512

e2ce4665f3096f3f965fffbb391d9c27b5859d6477df89b50bab36c9c11ba8e9750be894aae0266462512ca219bb99334bb291fe31c110fe48013fb186024cad
SSDEEP

3072:yu+9e4XRgChfC7hrNxBZRoBD7J/lIWHQ9+7S5wf7ghpzNC+io3nP:YFuJBDoZ7JmajBEx/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
febfe22fc5686476ae623de92409924f_JaffaCakes118

Files

febfe22fc5686476ae623de92409924f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d078f955b51cb8e0be22bd28f06a0aa1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
lstrlenA
WaitForSingleObject
CreateProcessA
LoadLibraryA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
SetEnvironmentVariableA
VirtualAlloc
VirtualFree
GetVersionExA
Sleep
GetProcAddress
TerminateProcess
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
FindAtomA
lstrcpyA
lstrcatA
GetLastError
HeapSize
HeapReAlloc
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

user32

GetFocus
GetCursorPos
GetWindowRect
InflateRect
EqualRect
wsprintfA
ClientToScreen
IsWindowVisible

gdi32

GetBkColor
GetBkMode

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d078f955b51cb8e0be22bd28f06a0aa1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 152KB - Virtual size: 155KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 152KB - Virtual size: 155KB