37d5505d3bcffbb864d3856661f24f84_JaffaCakes118

General

Target

37d5505d3bcffbb864d3856661f24f84_JaffaCakes118
Size

143KB
MD5

37d5505d3bcffbb864d3856661f24f84
SHA1

db64f628bf5b93b3becac9cf2638976e880fca9d
SHA256

acafb3e9b4b2f97b504d6ba7afc7ef99f28f96b28e1b9bc19fb4ae589ff5fef4
SHA512

8a02508ba5f43a07e990afde1676142d75c08bc87b0346548fe44de3443f1ff7f9714319c25a70167452d6b435cc59880766c4abb190065b8af8e13d3ac76e95
SSDEEP

3072:qk9HeNYFRqo1GxLjtUYYS8Msy1ELY7wAIhNB1xhBdE3nf1AoTQ1H:jH94xLjtRqMB+MMRW3ntAog

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d5505d3bcffbb864d3856661f24f84_JaffaCakes118

Files

37d5505d3bcffbb864d3856661f24f84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e2aff3c3ac1d9cb9fdd03ee4c65cb3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetVersionExW
LocalFree
lstrcpynW
FormatMessageW
TlsGetValue
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
lstrcpyW
GlobalFree
SetLastError
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
CloseHandle
GetCurrentThreadId
lstrcatW
GetModuleFileNameW
GetModuleHandleW
SetErrorMode
InterlockedIncrement
GetVersion
lstrcmpW
GlobalFlags
GetVersionExA
FreeLibrary
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA

user32

PeekMessageW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

ole32

StgOpenStorageEx

oleaut32

GetActiveObject
SafeArrayGetRecordInfo
VarI2FromUI8
VariantInit

Sections

.text
Size: 60KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e2aff3c3ac1d9cb9fdd03ee4c65cb3b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 60KB - Virtual size: 119KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 90KB - Virtual size: 89KB

.reloc Size: 512B - Virtual size: 324B

.text
Size: 60KB - Virtual size: 119KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 90KB - Virtual size: 89KB

.reloc
Size: 512B - Virtual size: 324B