37e7249715c81c430d798e13543460ee_JaffaCakes118

General

Target

37e7249715c81c430d798e13543460ee_JaffaCakes118
Size

98KB
MD5

37e7249715c81c430d798e13543460ee
SHA1

2f3cb75f11d9e5d0e5532cb29db7d35b1b2e46c5
SHA256

cc5a673966e192833c6b2d573a90c6529170c1a643e172c19de17eca5af71ea1
SHA512

9a33d0dee54e21b7cb4e35902a00ea53bb2518df1a2151e4df2c0f15002ada6028960bf716d3c8a0f8e793603303a9512c476c5b0c212827aec2e456f94c33e0
SSDEEP

1536:nrdObFATeqChLPoi5NXIkiCHtfISY9rRQlGQxHDgU7pWMdCqr:n0+e5h959iCKSIqMQxHDj7IH6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37e7249715c81c430d798e13543460ee_JaffaCakes118

Files

37e7249715c81c430d798e13543460ee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

55f8aeffa37f5b82de4a2a98ba678f5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord14

kernel32

lstrcmpA
lstrlenA
LoadResource
LoadLibraryA
LockResource
lstrcpyA
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

GetCursorPos

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55f8aeffa37f5b82de4a2a98ba678f5e

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

Sections

.text Size: 35KB - Virtual size: 35KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 199KB - Virtual size: 199KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 35KB - Virtual size: 35KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 199KB - Virtual size: 199KB

.reloc
Size: 3KB - Virtual size: 3KB