16457e7371c9bcd98bf8fecd48ca8280_JaffaCakes118

General

Target

16457e7371c9bcd98bf8fecd48ca8280_JaffaCakes118
Size

154KB
MD5

16457e7371c9bcd98bf8fecd48ca8280
SHA1

6e5eac1baac1bc8f3fe6890a7c9b1141c61f54f2
SHA256

a2f6f88c317574d3d63a198bc9e5bc9e8820cff3028f05ec2f4b4695c7bbb8a6
SHA512

8703fcdd3eeaf33eda4f87cdd0c42f61d4d94269a37bc662f02e36f14cb039cb6764d2b2152d6c72b49c0b55ae9e638585427e901f17d8d9a5bb41094d3f4925
SSDEEP

3072:s2GNn8tdDWz+lXdfH5uv5NCNZj1OljFVwAf:zGNsDW73Aj1OljFN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16457e7371c9bcd98bf8fecd48ca8280_JaffaCakes118

Files

16457e7371c9bcd98bf8fecd48ca8280_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6d169620a305659b4ca5519bb63ad7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamA
LoadMenuA

kernel32

HeapDestroy
WaitForSingleObject
CreateThread
GetLastError
GetProcAddress
GetModuleHandleA
FindResourceA
CreateProcessA
GetCommandLineA
GetStartupInfoA
SetThreadContext
GetThreadContext
WriteProcessMemory
VirtualAllocEx
CloseHandle
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6d169620a305659b4ca5519bb63ad7c

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 140KB - Virtual size: 136KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 140KB - Virtual size: 136KB

.reloc
Size: 8KB - Virtual size: 4KB