0d29c8587b7320219c91f05d1ff3f23b_JaffaCakes118

General

Target

0d29c8587b7320219c91f05d1ff3f23b_JaffaCakes118
Size

238KB
MD5

0d29c8587b7320219c91f05d1ff3f23b
SHA1

a6cfa8276724d328cf1cc76713929a1c3578f247
SHA256

b91d80841dbd57658aac7ac3349dce7daaf0d711604c930570b2c065e091d8c5
SHA512

a466847168ff39046be0c7322854d3f33c116066c6fec793d4b2cd2a3b31628c83815337cc3485a8134eb1eab49a937e92595bd6e6ed1738597edcc0f2a4020e
SSDEEP

6144:pGOrchuepALJVbixxDIzm82dgztKyQL3mXxc7rvLgH3zl6WgnkRSPF4q:pGOr4uSALJFEx0zVXztK1mXCDcZpgnqc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d29c8587b7320219c91f05d1ff3f23b_JaffaCakes118

Files

0d29c8587b7320219c91f05d1ff3f23b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ed5b5d6d6f4ed62937f0ccb32a0a1fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
MultiByteToWideChar
SetHandleCount
GetCommandLineA
GetProcAddress
SetLastError
HeapReAlloc
TlsFree
GetCurrentThread
HeapDestroy
GetCurrentProcessId
HeapAlloc
EnumSystemLocalesA
GetStdHandle
VirtualProtect
GetModuleHandleA
TlsAlloc
OpenFile
GlobalCompact
VirtualFree
GetSystemInfo
LCMapStringA
GetEnvironmentStrings
IsValidLocale
TlsGetValue
EnterCriticalSection
GetVersionExA
CompareStringW
lstrcpyA
ExitProcess
GetTickCount
CompareStringA
LCMapStringW
HeapFree
GetLocaleInfoA
GetModuleFileNameA
IsBadWritePtr
LoadLibraryA
QueryPerformanceCounter
GetLastError
VirtualAlloc
LockResource
GetDateFormatA
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetLocaleInfoW
GetStringTypeA
GetTimeZoneInformation
WriteFile
SetStdHandle
SetEnvironmentVariableA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetOEMCP
GetACP
WideCharToMultiByte
GetStartupInfoA
GetStringTypeW
FreeEnvironmentStringsW
UnhandledExceptionFilter
TlsSetValue
IsValidCodePage
FreeEnvironmentStringsA
GetTimeFormatA
GetFileType
DeleteCriticalSection
LeaveCriticalSection
GetCPInfo
GetUserDefaultLCID
OpenMutexA
InterlockedExchange
HeapSize
HeapCreate

advapi32

CryptGetHashParam
CryptAcquireContextA
RevertToSelf
RegFlushKey
RegEnumValueW
GetUserNameA

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ed5b5d6d6f4ed62937f0ccb32a0a1fc

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 122KB - Virtual size: 121KB

.data Size: 111KB - Virtual size: 110KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 122KB - Virtual size: 121KB

.data
Size: 111KB - Virtual size: 110KB

.rsrc
Size: 4KB - Virtual size: 4KB