108498f10136b1b717d7835134ef22f7_JaffaCakes118

General

Target

108498f10136b1b717d7835134ef22f7_JaffaCakes118
Size

248KB
MD5

108498f10136b1b717d7835134ef22f7
SHA1

70d055a8054a31ad907360db2f40c1f6191adb87
SHA256

ec7cac53b061377e3de78d60df64eb918e5a3927d8e681412d0aa4811ecadf8f
SHA512

016c8305b3e79722e12cf400f711c0e0f2bd7a3cb99229fc15a588cd4c7e4b0582787da5aec8e11e4370dd2bffd5153b77c97035b5ac182bdbc79a267f99ccba
SSDEEP

6144:LFlA2N97v9xnOx1jQ74uDnjMX01tHzW3JH:LFlAc97vr9D1Fq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
108498f10136b1b717d7835134ef22f7_JaffaCakes118

Files

108498f10136b1b717d7835134ef22f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

267412436a6c08a69b7278c0c2b811be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CreateFileA
GetModuleFileNameA
GetModuleHandleA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetSystemTimeAsFileTime
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
HeapReAlloc
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
VirtualAlloc
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetLastError
WideCharToMultiByte
GetTimeZoneInformation
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
InitializeCriticalSection
VirtualQuery
InterlockedExchange
GetCPInfo
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetACP
GetOEMCP
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
CloseHandle

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

267412436a6c08a69b7278c0c2b811be

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 168KB - Virtual size: 165KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 168KB - Virtual size: 165KB