111c2a9e4b27aae3338749697f62def1_JaffaCakes118

General

Target

111c2a9e4b27aae3338749697f62def1_JaffaCakes118
Size

189KB
MD5

111c2a9e4b27aae3338749697f62def1
SHA1

5b664b4daa836543206489d05eb4a3fd3d0c2716
SHA256

b182339cc8aad44937d83ffeba6920f0f0bfb57e6acad251bf7d795b925d3723
SHA512

b85b9a66d665ec12615a38d19dfc12e7288ec634889ae2436959345d60e41626f13fda18b6cd7b8e6a7a2c3e500e48b5e0e027328bf1ebcec98b3788df761ad1
SSDEEP

3072:TAf8Fnz2gUFxJ2HoHzlwh23sxXroP0HZt0hte+sDIchwY6jRA:TAf42gUFx2oHzlwhRHZOe+sD7uG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
111c2a9e4b27aae3338749697f62def1_JaffaCakes118

Files

111c2a9e4b27aae3338749697f62def1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d4aae913a37af374f5c8b192fe5b1f10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameW
WriteConsoleOutputW
GetPrivateProfileSectionNamesW
IsProcessorFeaturePresent
CreateTimerQueueTimer
GetEnvironmentVariableA
CreateDirectoryExA
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetTimeZoneInformation
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
Sleep
HeapFree
GetCPInfo
LoadLibraryW
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapAlloc
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 7.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4aae913a37af374f5c8b192fe5b1f10

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 22KB - Virtual size: 7.7MB

.rsrc Size: 111KB - Virtual size: 110KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 22KB - Virtual size: 7.7MB

.rsrc
Size: 111KB - Virtual size: 110KB

.reloc
Size: 16KB - Virtual size: 15KB