02d2b9ea4dcac72e5e3c01b97789dd00_JaffaCakes118

General

Target

02d2b9ea4dcac72e5e3c01b97789dd00_JaffaCakes118
Size

135KB
MD5

02d2b9ea4dcac72e5e3c01b97789dd00
SHA1

e4a30a5a07f6438d10d647a5300962d52b120340
SHA256

dcdaa21b9078022adc255f69b4f45bccc05e2b1a636dac5302b9593cfd5a937f
SHA512

bec51f0c65eb2d7adbba8cc71d834989de31c9e51e23a963f88438014b0b1e5801dcf9a4be4bcd712c13c4a15dd1281078ff3ce5e8039d97a01bd184ec9c76d1
SSDEEP

1536:DwNXTx1wr/FsfyNDLPWElv9ybWyaL+W5HUYkBSy8JjEQS1CkjtEBeUS79Aj7:UNXTTLGKE19ybfaL+WeB2jePkSE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02d2b9ea4dcac72e5e3c01b97789dd00_JaffaCakes118

Files

02d2b9ea4dcac72e5e3c01b97789dd00_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0c1ac63695a36fd752b2b75ee7804773

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
VerifyVersionInfoW
EnumSystemCodePagesA
GetPrivateProfileIntA
GetNamedPipeInfo
ReadConsoleOutputAttribute
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
LoadLibraryW
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
IsProcessorFeaturePresent
HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 7.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c1ac63695a36fd752b2b75ee7804773

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 21KB - Virtual size: 7.7MB

.rsrc Size: 58KB - Virtual size: 57KB

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 21KB - Virtual size: 7.7MB

.rsrc
Size: 58KB - Virtual size: 57KB

.reloc
Size: 17KB - Virtual size: 17KB