09d486e3c73f99d5a6d5b271cda5c9b7_JaffaCakes118

General

Target

09d486e3c73f99d5a6d5b271cda5c9b7_JaffaCakes118
Size

188KB
MD5

09d486e3c73f99d5a6d5b271cda5c9b7
SHA1

79529028eccc96d2e402b16ddfa64992982b3d52
SHA256

613fc734815317d12fff2b67ad0ba2ad72f539b4d01c4ce30fa1397907201319
SHA512

2fc09b8ad35879316e8ee0f5ad4787c683e57b25be86545fa46cd0e38283fd068b8877cb0661a4d1bc9d050ac095904dfed98cd9e215a7dbc7f97059487710d3
SSDEEP

3072:4zSoKj0pt1K/pqu4Cd9GsIR6bpbHuGJMfR+F1lXMS3K+0n2oha2i:XoKyKhqPgpLvKR+F1lcC8Lhad

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09d486e3c73f99d5a6d5b271cda5c9b7_JaffaCakes118

Files

09d486e3c73f99d5a6d5b271cda5c9b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3daabeca32c584bcd5673e7095231fa1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateThread
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLastError
RaiseException
SetUnhandledExceptionFilter
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
Sleep
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3daabeca32c584bcd5673e7095231fa1

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 124KB - Virtual size: 123KB

.reloc Size: 8KB - Virtual size: 36KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 124KB - Virtual size: 123KB

.reloc
Size: 8KB - Virtual size: 36KB