134c830b7795566197eab0f75d67a2a5_JaffaCakes118

General

Target

134c830b7795566197eab0f75d67a2a5_JaffaCakes118
Size

706KB
MD5

134c830b7795566197eab0f75d67a2a5
SHA1

d28a5aa772ed6c08973a24fa8891a6f86c6e7c42
SHA256

3750f1ecc00e58efcab73e6ea1882d9dfb5fb5373c7f01c429fd0555015f6972
SHA512

87482190c41d78e08b6e7159b7ce67c7e853b2dcd1963e519333fb26403a09a08e2227c4188cdbd697bc13f143d0cf4f94ebcbb3fff526924dc490bf1e37e7eb
SSDEEP

12288:iTZn43keg/vnRR4cx7KXvwCICrX7q9nPn9gIgIgIgIgIgIgIgcTgIg:iTR43kz/vzj7mvTBrLEPn9dddddddhTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
134c830b7795566197eab0f75d67a2a5_JaffaCakes118

Files

134c830b7795566197eab0f75d67a2a5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

14a4136878c18fd5ba525731c92942e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetProcAddress
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
GetEnvironmentStringsW
CreateFileMappingA
CloseHandle
MultiByteToWideChar
WriteFile
ReadFile
UnhandledExceptionFilter
WaitForSingleObject
HeapSize
WideCharToMultiByte
GetStdHandle
GetTempPathA
HeapAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

user32

PostQuitMessage
KillTimer
DefWindowProcA
UpdateWindow
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 658KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

14a4136878c18fd5ba525731c92942e6

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 42KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 658KB - Virtual size: 660KB

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 658KB - Virtual size: 660KB