111342d3c3b1d863fdbe84f527a676e0_JaffaCakes118

General

Target

111342d3c3b1d863fdbe84f527a676e0_JaffaCakes118
Size

92KB
MD5

111342d3c3b1d863fdbe84f527a676e0
SHA1

38655e9e9854c399e31c92831f199a759eb9c708
SHA256

16894eca45bdf36a711882951fd5003c9475b47a2b8688e75e508a34d9248b0f
SHA512

543cd25109bb8b9d1b153c909545eefa688ec14fd45155a5cbeaf9e497e3b20e865a62cf6182c19c52022f31063e3027517f703cdf81c9ba484cca9a9580d516
SSDEEP

1536:hi9WK6h+Bh1Bzb+cyCSFzvGRxZFSecHek8cqvY9B/xKPkdWOfGgC:yWKP+cyCXjFVAezFxeWOut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
111342d3c3b1d863fdbe84f527a676e0_JaffaCakes118

Files

111342d3c3b1d863fdbe84f527a676e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5df822e6edf5d13c5d5e63816d03ae1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\temp\3selxd.txt

Imports

kernel32

GetProcAddress
Beep
GetModuleHandleA
GetSystemInfo
VirtualProtect
VirtualAlloc
VirtualAllocEx
DeleteFileA
GetLastError
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
GetLocaleInfoA
VirtualQuery

ole32

CoCreateInstance

avifil32

AVIMakeFileFromStreams
AVIPutFileOnClipboard
AVISaveOptions
AVIFileEndRecord

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5df822e6edf5d13c5d5e63816d03ae1

Headers

File Characteristics

PDB Paths

Imports

kernel32

ole32

avifil32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 60KB - Virtual size: 56KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 60KB - Virtual size: 56KB