3f8f055b24a0202a803cec4b2b4f181b_JaffaCakes118

General

Target

3f8f055b24a0202a803cec4b2b4f181b_JaffaCakes118
Size

452KB
MD5

3f8f055b24a0202a803cec4b2b4f181b
SHA1

51353b04077bda0257256dbd95016e6f1743a82d
SHA256

88700070ef6b76496ecf78f30b35f3febe758697288f2d875dc92e64c8f5f34a
SHA512

bf6d228040be6077dfa13e39b3310281dfb6021817c8395ab958c4cf77f43ca8aa7b5e38aec420dd5406e167f84f3654286375ee7796650b41f8f8b15b9e635b
SSDEEP

6144:pE0bNL3ipFAsqAXd8HLBkBAIVkyBwlMwiUJr8EmXhue7cR1Dum:pE0Rynjq8d8HLKBtkyqGwi4lWfcR1DV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f8f055b24a0202a803cec4b2b4f181b_JaffaCakes118

Files

3f8f055b24a0202a803cec4b2b4f181b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92f20e381e3a5420951d2a44e97ddfb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
SetEvent
VirtualFree
GetProcAddress
GetLastError
CreateThread
lstrcatA
VirtualAllocEx
InterlockedIncrement
GetModuleHandleA
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
MultiByteToWideChar
CloseHandle

user32

ShowWindow
SendInput
EnableWindow
SetActiveWindow
LoadIconA

msacm32

acmFilterTagEnumW

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92f20e381e3a5420951d2a44e97ddfb6

Headers

File Characteristics

Imports

kernel32

user32

msacm32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 240KB - Virtual size: 236KB

.data Size: 152KB - Virtual size: 154KB

.rsrc Size: 20KB - Virtual size: 225KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 240KB - Virtual size: 236KB

.data
Size: 152KB - Virtual size: 154KB

.rsrc
Size: 20KB - Virtual size: 225KB