113c082d0bb4506cf3c9cbaab13bbd9c_JaffaCakes118

General

Target

113c082d0bb4506cf3c9cbaab13bbd9c_JaffaCakes118
Size

42KB
MD5

113c082d0bb4506cf3c9cbaab13bbd9c
SHA1

be23a1d4706011865ed7210b1f5e54e60703d04f
SHA256

dd3b47313226a57acd6722295da8ba0af8cd7a645871ab7624e105bf9d395247
SHA512

5d5b9bdca703af93ee1300a6b405591e7e1bcd799f1124ebb4c9bca9b4e3a1bc65d95df8398167b6f9bcc1483f6b98e0bb6628853c2d5638dd8421adb3d893fe
SSDEEP

384:HSbfmlVBloHTCaSr/nYTg8DIi25Gsw8SWoD1wKiyft3psfUncrGqVd5PidMGlp5Y:wDCaKYTO75Gp8Sam39cCq7odFlp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
113c082d0bb4506cf3c9cbaab13bbd9c_JaffaCakes118

Files

113c082d0bb4506cf3c9cbaab13bbd9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d038eb564fbce2651d8a2cad97837ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

kernel32

UnhandledExceptionFilter
SetEnvironmentVariableA
CompareStringW
CompareStringA
WinExec
GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
CloseHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW

user32

LoadStringA
wsprintfA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d038eb564fbce2651d8a2cad97837ca

Headers

File Characteristics

Imports

urlmon

wininet

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 144B

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 144B