14ec879bd522b39a86a4995ed0ca4a09_JaffaCakes118

General

Target

14ec879bd522b39a86a4995ed0ca4a09_JaffaCakes118
Size

728KB
MD5

14ec879bd522b39a86a4995ed0ca4a09
SHA1

48ab62acdcc7a32b6c6f2283ecffd530c3d4c393
SHA256

d0be5dba860a68c377ce61c8e89478e51e2d51e1b7192784c9699ddcf11f9519
SHA512

d2b11c1fb63fc5cbb57e7e3bd324032919b4b2ae1adbc74005a9807dd00592e07d14d8de7f7dde1257b4c23647cdd653b4ed35d28d6c1ca11e86b1513a972aa1
SSDEEP

12288:kRGHX/qrZJsPt+j37QIScSlmhvmAzxGajGajGajGajGajGajGajGavOAGajGa:2GHirZmPvBTkhvRzsrrrrrrrbr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ec879bd522b39a86a4995ed0ca4a09_JaffaCakes118

Files

14ec879bd522b39a86a4995ed0ca4a09_JaffaCakes118
.exe windows:5 windows x86 arch:x86

309f541d5ebdcccb7fabfe5ee92eb868

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
UpdateWindow
DefWindowProcA
KillTimer
PostQuitMessage
EnableWindow
GetSubMenu
LoadCursorA
SendMessageA
CreateWindowExA
LoadIconA

kernel32

GetModuleHandleA
LCMapStringW
LCMapStringA
GetStringTypeW
LoadLibraryA
LeaveCriticalSection
WriteConsoleW
GetProcessHeap
GetCurrentThreadId
HeapCreate
GetTimeZoneInformation
CreateEventW
TerminateProcess
GetModuleHandleW
HeapReAlloc
GetACP
GetSystemTimeAsFileTime
CloseHandle
WriteFile
SetUnhandledExceptionFilter
InterlockedExchange
FindFirstFileA
SetFilePointer
GetStringTypeA
MapViewOfFile
GetCurrentThread
GetProcAddress
MultiByteToWideChar
GetEnvironmentStrings
GetVersionExA
FlushFileBuffers
EnterCriticalSection
GetStdHandle
InitializeCriticalSection
HeapAlloc
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
HeapDestroy
VirtualFree
HeapFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetOEMCP

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 672KB - Virtual size: 670KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

309f541d5ebdcccb7fabfe5ee92eb868

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 672KB - Virtual size: 670KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 672KB - Virtual size: 670KB