05817d8a2707b8d9aa8569aec4297a0d_JaffaCakes118

General

Target

05817d8a2707b8d9aa8569aec4297a0d_JaffaCakes118
Size

40KB
MD5

05817d8a2707b8d9aa8569aec4297a0d
SHA1

442999f0cc2b35aba84890edda072d47c1222828
SHA256

b846aff6b805f4f8704d6533adf53fa20511704de786e57d487781a6ede08e10
SHA512

870d557ea46824bb8ef2ccd1cbbd3759145bbc35489b2485c27d203e30f36d055143e8ebc3cdd1082945c33433ea1f25bf2cfb6f37f9872052b91438e0363df2
SSDEEP

768:hZSmiiun2jRV7OM/91388r8kWt6kpoxppfjwvkuD:hZ791388yHoxppfjw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05817d8a2707b8d9aa8569aec4297a0d_JaffaCakes118

Files

05817d8a2707b8d9aa8569aec4297a0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2411b56deb398913d5d9e8452ff9720

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateFileMappingA
CreateMutexA
MapViewOfFile
UnmapViewOfFile
OutputDebugStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
ReleaseMutex
CloseHandle
LocalFree
LocalAlloc
GetStartupInfoA
UnhandledExceptionFilter
GetCurrentProcess
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
HeapFree
HeapAlloc
RtlUnwind
GetModuleHandleA
ExitProcess
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
IsBadReadPtr
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
SetUnhandledExceptionFilter

user32

MessageBoxA
LoadStringA
SetDlgItemTextA
EndDialog
SetWindowPos
DialogBoxParamA
SetTimer
GetParent
GetDesktopWindow
GetWindowRect

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2411b56deb398913d5d9e8452ff9720

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 7KB

.WYCao Size: 3KB - Virtual size: 20KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 7KB

.WYCao
Size: 3KB - Virtual size: 20KB