107aaebac94adefeb7bf1a72ce10379d_JaffaCakes118

General

Target

107aaebac94adefeb7bf1a72ce10379d_JaffaCakes118
Size

192KB
MD5

107aaebac94adefeb7bf1a72ce10379d
SHA1

f761de4eadc3c314428cbcca6bf0fd734b13328a
SHA256

cefd30205985a7d0fc2ffff960f75113bfff2c1b803cb0d05db7ee1d18fe5cf0
SHA512

9a0d86568f71fca35c4fc933015011f8e53e3f7da40e39f69a59dd569f1063a6709a692846e0501cdb9a3a5ad55fa3e67d55ae9aec2e025360794460344f2562
SSDEEP

3072:lwIITlFKnTJC5G8C5qLGIPd+VI7JWjb8xDdf0Zb1ekhXJOG8Tth5D0x2d:ewMG5qLGk+S1Cb8xD10ykpJZ0thlD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
107aaebac94adefeb7bf1a72ce10379d_JaffaCakes118

Files

107aaebac94adefeb7bf1a72ce10379d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2252dbefad401ab741de1ea29ae0ee8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
LockResource
LoadResource
SizeofResource
FindResourceA
VirtualProtect
GetLocaleInfoA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
GetLastError
CloseHandle
WriteFile
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEndOfFile
ReadFile
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetSystemInfo

shell32

ShellExecuteA

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2252dbefad401ab741de1ea29ae0ee8

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 152KB - Virtual size: 150KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 152KB - Virtual size: 150KB