391a30309e1b2416366b3c3821ddf46e_JaffaCakes118

General

Target

391a30309e1b2416366b3c3821ddf46e_JaffaCakes118
Size

140KB
MD5

391a30309e1b2416366b3c3821ddf46e
SHA1

93ce642e59c6771b3bde7226c9b3cccc364b9103
SHA256

c0aca8444291b2195b01e47cfbafd94ba5b78e1d02c3f43dffad8f6c984aa883
SHA512

47f0930045390517546eba6f93db9b9102481ccfc943000815a6a683ff68e623c0b65fb8905ef919f493d8e1e86fff8397dbab2b2a228ff89f353454bbc16596
SSDEEP

1536:g6bteIZMoRMUmjYWN8VsnIkt2QeU1EKIPAdk6p3wA+KWiCG37DBAGV6XM8gs+CRo:9tFZMoRLWN8VsnIkt2ZU1ExPAdkdwne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
391a30309e1b2416366b3c3821ddf46e_JaffaCakes118

Files

391a30309e1b2416366b3c3821ddf46e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89507b51374cb084a2ac0a22d7bc1f3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
WinExec
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
LoadLibraryA
LCMapStringA
HeapReAlloc
GetProcAddress
HeapAlloc
GetOEMCP
VirtualAlloc
GetCPInfo
WriteFile
GetACP
HeapFree
GetModuleHandleA
lstrcpyA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
VirtualFree
RtlUnwind
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate

user32

GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
RegisterClassA
LoadCursorA
ShowWindow
PostMessageA
UpdateWindow
GetDC
CreateWindowExA
ReleaseDC
BeginPaint
DefWindowProcA
LoadImageA
EndPaint
PostQuitMessage

gdi32

SelectObject
RealizePalette
DeleteObject
CreatePalette
CreateCompatibleDC
SelectPalette
GetStockObject
BitBlt
DeleteDC
GetObjectA
GetDeviceCaps

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89507b51374cb084a2ac0a22d7bc1f3b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 116KB - Virtual size: 115KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 116KB - Virtual size: 115KB