12f306544865765ff3db8f5b4fb8f30a_JaffaCakes118

General

Target

12f306544865765ff3db8f5b4fb8f30a_JaffaCakes118
Size

64KB
MD5

12f306544865765ff3db8f5b4fb8f30a
SHA1

47385e6224963cf1e94499b4a9bcf076e57d12ba
SHA256

3a02228d60bc955e2a4a2e856dbfdb8b54f5231d501c52e78517a565b4cedc86
SHA512

c6071a5371496255f089d3b291258270b63c0ac021e8f758db0b3d43b8e129ff7302c2e895549dd188ae39cb41abe9d7a6b8106dbcf31e7bede8ed8193c4b7bb
SSDEEP

768:UlJhvpo5YyOC74XxAuTTb0m4BEVNMcyqZ9GVokHc:UlJFtC0xAuTTb0mCEVNKWgokHc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f306544865765ff3db8f5b4fb8f30a_JaffaCakes118

Files

12f306544865765ff3db8f5b4fb8f30a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf1deabdd231a10befe0c2fc506990f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapFree
CloseHandle
ReadFile
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
GetLastError
VirtualFree
RtlUnwind
WriteFile
GetTimeZoneInformation
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf1deabdd231a10befe0c2fc506990f3

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB