2e9dc31d675831dc38229f7a5cd3d6cc_JaffaCakes118

General

Target

2e9dc31d675831dc38229f7a5cd3d6cc_JaffaCakes118
Size

14KB
MD5

2e9dc31d675831dc38229f7a5cd3d6cc
SHA1

4b0178478e80cc9650e695cf2d6a388ef23b1dd7
SHA256

1e5ebc3aaf0b21750631e6a11ba241f29b0b4a0c11452f15080ea826c126ee42
SHA512

bc819e7b32f449501799d29a5735bd6c855e22086cb2aa45ef45abdf10f431ebd02d00d979e9b53423543bbdde171af07cab007580eacfbae1bfa5456b5ef2c1
SSDEEP

192:MDortRYRbNbxHSK0qVTxnfoX4nJSVjAt/ZiICn0S:MUbS5bxTPtnsWJyuAI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e9dc31d675831dc38229f7a5cd3d6cc_JaffaCakes118

Files

2e9dc31d675831dc38229f7a5cd3d6cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

834ffd4fb47eade84db32ed655ef7a99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
UnmapViewOfFile
CreateFileA
GetThreadLocale
GetOEMCP
GetStringTypeW
GetFileAttributesW
TerminateProcess
GetCurrentThreadId
LoadLibraryA
HeapReAlloc
GlobalFree
SetStdHandle
SetConsoleCP
FindNextFileA
VirtualAlloc
VirtualProtect
InterlockedDecrement
TlsFree
GetModuleHandleA
HeapAlloc
GetStartupInfoA
OutputDebugStringA
SystemTimeToFileTime
OutputDebugStringW
SetUnhandledExceptionFilter
GetTickCount
GetLocalTime
GetCommandLineW
CreateEventA
DeleteFileA
FreeLibrary
VirtualQuery
GetACP
QueryPerformanceCounter
GetCommandLineA
Sleep

msvcrt

memmove
_unlock
??3@YAXPAX@Z
_wcsnicmp
__dllonexit

lz32

LZClose

ole32

CoCreateInstance
StgSetTimes
CoInitializeEx
CoInitialize

user32

ShowWindow
SetWindowPos
GetParent
IsDlgButtonChecked
SetWindowLongA
ClientToScreen

advapi32

RegQueryInfoKeyW

gdi32

BitBlt
DeleteDC

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

834ffd4fb47eade84db32ed655ef7a99

Headers

File Characteristics

Imports

kernel32

msvcrt

lz32

ole32

user32

advapi32

gdi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 110KB

.reloc Size: 512B - Virtual size: 140B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 110KB

.reloc
Size: 512B - Virtual size: 140B