3cc8bca54b5218041d527c5230071eb5_JaffaCakes118

General

Target

3cc8bca54b5218041d527c5230071eb5_JaffaCakes118
Size

234KB
MD5

3cc8bca54b5218041d527c5230071eb5
SHA1

8912713ca4ac6759d424818bcdf6f0af2012e450
SHA256

130aa71f0fb613d34787d0403aa3e2ed3629479df18cbbf6ed27613df0eeec5e
SHA512

872f55d2aca1033ca31873cf643d1c18f3f6ba83a20d91f9b6e955d208bdfdd82ff5bc8875e183c119fa6ccb41d835b1055b85430bf0bd102d6da3ef7510ec6f
SSDEEP

6144:FXMzH6fDRsFVh5v3Yo143EQPl7udGp6pFmut2pdwc:GLMDaVToAKEQh96pF2z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc8bca54b5218041d527c5230071eb5_JaffaCakes118

Files

3cc8bca54b5218041d527c5230071eb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ac253e589589248e3da3fa7c13f626f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
WinExec
GetWindowsDirectoryW
InterlockedIncrement
ResetEvent
DosDateTimeToFileTime
FlushInstructionCache
AreFileApisANSI
SetUnhandledExceptionFilter
CreateMutexW
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
CreateFileW
FindResourceW
GetVersion
RemoveDirectoryW
GetPrivateProfileStringW
SetEndOfFile
GetCurrentThreadId
SetNamedPipeHandleState
GlobalSize
CreateThread
CreateProcessW
SetEvent
VirtualAlloc
GetEnvironmentVariableW
EnterCriticalSection
OpenMutexW
VirtualQueryEx
UnlockFile
VirtualQuery
GetSystemDirectoryW
GetLogicalDrives
FormatMessageW
SystemTimeToFileTime
IsProcessorFeaturePresent
GlobalUnlock
GetProcAddress
HeapAlloc
LoadLibraryA
GetCurrentDirectoryW
SetFilePointer
GetSystemTime
SetFileTime
WaitForSingleObject
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
GetCPInfo
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
HeapReAlloc
GetACP
GetOEMCP
LCMapStringA
LCMapStringW

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ac253e589589248e3da3fa7c13f626f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 221KB - Virtual size: 220KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 5KB - Virtual size: 6KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 221KB - Virtual size: 220KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 5KB - Virtual size: 6KB

.rsrc
Size: 3KB - Virtual size: 3KB