3ddffa025093b359c999a62e1438e297_JaffaCakes118

General

Target

3ddffa025093b359c999a62e1438e297_JaffaCakes118
Size

169KB
MD5

3ddffa025093b359c999a62e1438e297
SHA1

ef337257f6a3f222c51a87a97c75b0b4f81bcfb9
SHA256

72092448953a10284aa454b0c570c87140857d7a9d1e234f94e5a5d2f2bf457e
SHA512

5f7efbd710518eb16484851bb81dca1f1f604935291c82c9b7510c208586a5e0dbc08b6a48916783a289791175783fbe472e834c8836011379b7faffe9e98317
SSDEEP

3072:KrpU/qkhQ+p5YPIJ4r9K0pqsJ18Ky6Wu+p7l0Lq3ux+UrpgiPOTg4LaLa4jfOZwi:UpwsBQKg0ZEb71eVPXrj0VX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ddffa025093b359c999a62e1438e297_JaffaCakes118

Files

3ddffa025093b359c999a62e1438e297_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f814a4f6e4a5cf8f6366054121fec8d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadProcessMemory
lstrcatA
GetProcAddress
VirtualAlloc
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 209KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f814a4f6e4a5cf8f6366054121fec8d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 209KB - Virtual size: 212KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 209KB - Virtual size: 212KB