39c31f336e98c84579eab7b72d17ec0d_JaffaCakes118

General

Target

39c31f336e98c84579eab7b72d17ec0d_JaffaCakes118
Size

224KB
MD5

39c31f336e98c84579eab7b72d17ec0d
SHA1

f7b9ed37ccb9cbee2b0296d85cca96690fe96ef8
SHA256

be634fab86d1dfd31e690a689fc28582a04c33a2340253dd6e0bf272887fdc25
SHA512

afa59741531ef077d622f9bccb509d3b4c722415657c9e5c7338d86a05324f5e9405e9d0a5ed160c7bae23ee980d942d48bf4ecedbaf09fafeacf10869ed4488
SSDEEP

3072:0KlDcsG4r3Cc2BtuLJnodYLZXF0kg3hU05TKXc953xS4/vYQ:xosG23CxAL91l10kegXunvYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39c31f336e98c84579eab7b72d17ec0d_JaffaCakes118

Files

39c31f336e98c84579eab7b72d17ec0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f78be429e16ad58fe711c3a6d2eb7953

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputAttribute
GetConsoleCP
GetCommProperties
GetConsoleMode
GlobalDeleteAtom
GetFileAttributesA
EnumResourceTypesA
GetTickCount
SetConsoleTitleA
VirtualFree
lstrcpyA
GetConsoleOutputCP
VirtualUnlock
GetAtomNameA
MoveFileWithProgressA
GetVersion
LocalCompact
ResetEvent
RemoveDirectoryA
GetVolumePathNameA
GetDriveTypeA
Module32Next
ExitVDM
FindFirstChangeNotificationA
WaitForMultipleObjects
ReadConsoleOutputA
SetConsoleCP
OpenMutexA
IsBadHugeWritePtr
GetProcessHandleCount
FindFirstFileExA
IsDebuggerPresent
UnlockFile
SetFilePointerEx
FindAtomA
AllocConsole
IsValidCodePage
ReadConsoleA
GetConsoleWindow
DeleteTimerQueueEx
WriteConsoleOutputCharacterA
SuspendThread
GetTempPathA
FreeConsole
ReadFileEx
GlobalWire
ReadConsoleInputA
FlushConsoleInputBuffer
WriteFileGather
SetLocalTime
ReadConsoleOutputCharacterA
CreateFileMappingA
SetConsoleScreenBufferSize
SetConsoleNumberOfCommandsA
GetEnvironmentVariableA
HeapAlloc
IsBadReadPtr
IsBadHugeWritePtr
GetNamedPipeHandleStateA
GetCurrencyFormatA
VirtualAlloc
CancelTimerQueueTimer
GetComputerNameA
SetFileAttributesA
LoadLibraryExA
GetSystemDirectoryA

tapi32

lineAddProviderA

Sections

.itext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 68KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f78be429e16ad58fe711c3a6d2eb7953

Headers

File Characteristics

Imports

kernel32

tapi32

Sections

.itext Size: - Virtual size: 3KB

.text Size: 68KB - Virtual size: 731KB

.idata Size: 60KB - Virtual size: 57KB

.rsrc Size: 92KB - Virtual size: 91KB

.itext
Size: - Virtual size: 3KB

.text
Size: 68KB - Virtual size: 731KB

.idata
Size: 60KB - Virtual size: 57KB

.rsrc
Size: 92KB - Virtual size: 91KB