41056371681b47782b0ec183f2769d49_JaffaCakes118

General

Target

41056371681b47782b0ec183f2769d49_JaffaCakes118
Size

199KB
MD5

41056371681b47782b0ec183f2769d49
SHA1

16bd7588b122d27f8aa91e4b8a22ac750471147c
SHA256

a357bdd4fb244b84a275519875510ed95dc13b64d86d94ef110e8d9da1646eb2
SHA512

edcaaa8e9343cffc5ee02326943d4919af8ea7605447e1d7724d3e36c37db6af76c4dab08e954ba713f8ff6d6388d16007f4e707d16a62263cc65f903caf0e90
SSDEEP

3072:A59AxJLjcVV3l7Ewfh2Eu/YFbNL93tCOtcV8wiNOtN6jkt6:DxhjcVtb4ZIbCOtcU2T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41056371681b47782b0ec183f2769d49_JaffaCakes118

Files

41056371681b47782b0ec183f2769d49_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f330cb69a614181f4245601c2d8b136b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SearchPathA
LoadLibraryA
EnumTimeFormatsW
WritePrivateProfileStructW
GetProcessHeap
CreateWaitableTimerA
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetTimeZoneInformation
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
Sleep
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
IsProcessorFeaturePresent
LoadLibraryW
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
GetStringTypeW
ReadFile
HeapSize
CloseHandle
WriteConsoleW
SetFilePointer
SetStdHandle
CompareStringW
SetEnvironmentVariableA
CreateFileW

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 7.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f330cb69a614181f4245601c2d8b136b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 23KB - Virtual size: 7.7MB

.rsrc Size: 109KB - Virtual size: 109KB

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 23KB - Virtual size: 7.7MB

.rsrc
Size: 109KB - Virtual size: 109KB

.reloc
Size: 18KB - Virtual size: 18KB