060936e5fa3ac91ce446cd2bb8fd31ee_JaffaCakes118

General

Target

060936e5fa3ac91ce446cd2bb8fd31ee_JaffaCakes118
Size

236KB
MD5

060936e5fa3ac91ce446cd2bb8fd31ee
SHA1

52682a2872dcbd231b13a4bee7e9b5c14506a3f6
SHA256

bc09ce7cf9ef06aab763d1afbb18c6a3da905c814808569906b3523801d5d221
SHA512

1b4cc41173c37a55ba24f7979f77bb04112f0116436346931097226391da2fc58875408b9b37bf969aa3393798ac99afb5cbd9dc9ee1838f0f09b53537aea222
SSDEEP

3072:TCtemfjcy77DXlaEAxQIKkmV6kCzpHH6kamCSFe8OVeHIBtUG/6Le2B+S1C2T/yH:21Ln7DX8EAeareFmXOkYuGiC28d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
060936e5fa3ac91ce446cd2bb8fd31ee_JaffaCakes118

Files

060936e5fa3ac91ce446cd2bb8fd31ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fecb3aaad730618bc7645e94472ed7be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryA
MultiByteToWideChar
GetVersionExA
GetProcAddress
LoadLibraryA
GetStdHandle
GetCommandLineA
CloseHandle
CreateProcessA
GetModuleFileNameA
GetVersion
LocalFree
FormatMessageA
SetEndOfFile
GetLocaleInfoW
GetOEMCP
GetACP
ReadFile
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStartupInfoA
SetEnvironmentVariableA
CreateFileA
GetCurrentProcess
GetLastError
SetHandleCount
GetModuleHandleA
FlushFileBuffers
SetFilePointer
WriteFile
WideCharToMultiByte
RtlUnwind
RaiseException
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetStdHandle
GetFileType
ExitProcess
HeapAlloc
HeapReAlloc
TerminateProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fecb3aaad730618bc7645e94472ed7be

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 188KB - Virtual size: 185KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 16KB - Virtual size: 20KB

.text
Size: 188KB - Virtual size: 185KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 16KB - Virtual size: 20KB