1613b3002a46f294d9c19f543a46b8b6_JaffaCakes118

General

Target

1613b3002a46f294d9c19f543a46b8b6_JaffaCakes118
Size

186KB
MD5

1613b3002a46f294d9c19f543a46b8b6
SHA1

0b266ee8629760ecc8ba85a1880f4adbe28d36b7
SHA256

a917a67b816cd559c5041e403dbc67e8fe5684e86d3bc82bb0f05f33bbb58eac
SHA512

576ab999d83733d9808260997704d058998756e24cb63ea0f240165aecfcba0286bbc4b3a423042d00d268fd9762df17713f7444b9c3795fe034ad215d9f2731
SSDEEP

3072:oqt5OexrEiICPgfFyBm5PjLq+pgEQ9gRN+vRZ7qELdswdcu+MMejy9MiyaoCOxos:oY5Pfgt4KP6+pgIReRZ7dLdxiuWePQu9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1613b3002a46f294d9c19f543a46b8b6_JaffaCakes118

Files

1613b3002a46f294d9c19f543a46b8b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2fce1f81b54f304a83830f05d560ac9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
SetFilePointer
GetProcAddress
GetACP
GetCPInfo
FlushFileBuffers
LoadLibraryA
GetModuleHandleA
FileTimeToDosDateTime
HeapLock
BuildCommDCBAndTimeoutsW
SetLocaleInfoW
GetTickCount
GetOEMCP
GlobalGetAtomNameA
GetLastError
SetConsoleCtrlHandler
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapFree
CloseHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
LCMapStringW

user32

RegisterClassW
CreateWindowStationW
KillTimer
DdeCreateStringHandleW
GetPropW

gdi32

GdiGetDevmodeForPage
CreateDIBPatternBrush
PtInRegion
GetCurrentPositionEx
GetDeviceCaps
SelectPalette
GetPolyFillMode
CancelDC

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2fce1f81b54f304a83830f05d560ac9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 32KB - Virtual size: 243KB

.rsrc Size: 1024B - Virtual size: 560B

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 32KB - Virtual size: 243KB

.rsrc
Size: 1024B - Virtual size: 560B