29cd4ed8bcdf0821f279cf0cef2f6bb5_JaffaCakes118

General

Target

29cd4ed8bcdf0821f279cf0cef2f6bb5_JaffaCakes118
Size

234KB
MD5

29cd4ed8bcdf0821f279cf0cef2f6bb5
SHA1

89dba39de2b76404436682d3474e0f3fb0c06ceb
SHA256

e43965f648d6c9b4df7258da3061720e1933a0f5a22e7dfdd7bcc73d792c6ba4
SHA512

28a1c12368cf4f5a442cadbe3c1e7a958f0cc5b751944c08b313e22422b1c14fa4e4043438913e468e60160dddb4c61182151bdef695bc8b836fce9f509dfaa5
SSDEEP

3072:ErfjBYkAIlKaA33V7NPsluj0LI3/Wkeq1P8JxSrX0mr6ijT9XhRCcGR:ifjBtAAAHV7NPL0LIP51P8JxSp1THRK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29cd4ed8bcdf0821f279cf0cef2f6bb5_JaffaCakes118

Files

29cd4ed8bcdf0821f279cf0cef2f6bb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50b7e29aa53a385b7b7e01784991c58f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

send
connect

kernel32

GetCurrentProcess
SetStdHandle
LCMapStringW
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
HeapAlloc
HeapReAlloc
GetProcessHeap
GetLastError
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
DebugBreak
RaiseException
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
HeapFree
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
FlushFileBuffers
ExitProcess
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
CloseHandle
FreeLibrary
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
VirtualQuery
InterlockedExchange
SetFilePointer
VirtualProtect
GetSystemInfo
GetLocaleInfoA
LCMapStringA

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

50b7e29aa53a385b7b7e01784991c58f

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 162KB - Virtual size: 164KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 162KB - Virtual size: 164KB