12d98550eb846bc4892990e2522cc1bb_JaffaCakes118

General

Target

12d98550eb846bc4892990e2522cc1bb_JaffaCakes118
Size

66KB
MD5

12d98550eb846bc4892990e2522cc1bb
SHA1

513f7a675a5ad272cbd544c1c8b114ee0a708071
SHA256

bc2bcf4df9dce3b9e0e091afcde7fc0cd5d17919db6982e74726cc618716617c
SHA512

535c4be5c25c0a017e9d6f9e59fdf3afb19094bbfb49666c12fae37bd4a6edbfac15f56befe54742ed7795eaeb9bb578873a2babc1d5f12d429c7f33fa0a699f
SSDEEP

768:sWybWk8lVhoPJsWjSWbvhtLP00Soji5o6keJncciyT5zg7:sD98lISASMxoSPJeJccRtg7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12d98550eb846bc4892990e2522cc1bb_JaffaCakes118

Files

12d98550eb846bc4892990e2522cc1bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ae44f7fa78a07d0935dd4cedc5ca52f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

lz32

LZClose

kernel32

Sleep
GetVersionExA
LoadLibraryW
CreateMutexW
SetStdHandle
GetModuleHandleA
GetLocalTime
ExitProcess
GetACP
DeleteFileW
VirtualProtect
CreateThread
HeapSize
DisableThreadLibraryCalls
GetEnvironmentVariableW
GetCurrentThreadId
EnterCriticalSection
GetSystemDefaultLangID
CompareStringW
TlsSetValue
GetCommandLineA
GetCurrentProcess
GetStartupInfoA
GetTickCount
HeapAlloc
GetLastError
GetLocaleInfoA
TlsFree
GetProcAddress
GetSystemTimeAsFileTime
SetConsoleCP
GetOEMCP
GlobalSize
WideCharToMultiByte

user32

RegisterClassExW
PeekMessageW
SetWindowTextW
GetWindowThreadProcessId
MsgWaitForMultipleObjects
GetMenuItemCount
TranslateMessage

version

VerQueryValueA

ole32

StringFromGUID2
CoCancelCall

advapi32

RegQueryValueExW

gdi32

SelectPalette
SetBkColor
GetTextMetricsW

msvcrt

??1type_info@@UAE@XZ
_CxxThrowException
_stricmp
?what@exception@@UBEPBDXZ

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ae44f7fa78a07d0935dd4cedc5ca52f

Headers

File Characteristics

Imports

lz32

kernel32

user32

version

ole32

advapi32

gdi32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 10KB

.data Size: 11KB - Virtual size: 18KB

.reloc Size: 512B - Virtual size: 134B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 10KB

.data
Size: 11KB - Virtual size: 18KB

.reloc
Size: 512B - Virtual size: 134B