10dfbab943a55e61087d2ff53f2dedf6_JaffaCakes118

General

Target

10dfbab943a55e61087d2ff53f2dedf6_JaffaCakes118
Size

184KB
MD5

10dfbab943a55e61087d2ff53f2dedf6
SHA1

629fbd735ecd662057540398b86c36fb7a38ba93
SHA256

8a2a63088a3598b6543ecf6acdcd5f6a2b870da672d452c114655540444380e9
SHA512

dd76c7cee98ccbda3964183aae409ec01dec360643480981d5b57657413f3a495a871ef5d649ba692c0a18e11317dde41c688546a7ff9e2289f122ab68858a86
SSDEEP

3072:JDsq11CalT8cq+0lwe3gEukyB0cUDgLUckINDkB0ZxMcpkdR7A05YPfcUPr:W4cDcq+0PYBXUDgZZNuAecpko0MPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10dfbab943a55e61087d2ff53f2dedf6_JaffaCakes118

Files

10dfbab943a55e61087d2ff53f2dedf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8691050e00e4a4975b1a701969a4d75d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateFileW
SetFilePointer
WriteFile
GetFileSize
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTickCount
WriteProcessMemory
TlsSetValue
SetThreadContext
GetThreadContext
VirtualAlloc
GetProcAddress
LoadLibraryA
GetLastError
GetModuleFileNameW
GetSystemTime
lstrcatA
GetWindowsDirectoryA
ResumeThread
TlsGetValue
TlsAlloc
CreateThread
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetSystemInfo
MultiByteToWideChar
LCMapStringA
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
HeapSize

user32

wsprintfA
GetWindowRect
GetWindowRgn

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8691050e00e4a4975b1a701969a4d75d

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 170KB

.rsrc Size: 4KB - Virtual size: 640B

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 170KB

.rsrc
Size: 4KB - Virtual size: 640B