45d59ea76f4b1593a37bdd9fa13dabb8_JaffaCakes118

General

Target

45d59ea76f4b1593a37bdd9fa13dabb8_JaffaCakes118
Size

568KB
MD5

45d59ea76f4b1593a37bdd9fa13dabb8
SHA1

252c51d6667720b4ac80b6209e5076b1a3d06574
SHA256

3130a9e610409ceabe0e61393222301138cd7f3f06c4a444f2b15a12a1511e3f
SHA512

54416ce50e02ce803d09d88f5b0815963e9ec07d938629e90b73025d63a94b79c62de5fedb3f0f07b94ccda137a46919e821b931435c855a605ebfed99dd89ee
SSDEEP

12288:IDGNO/51a8VgIwzM2jCkbzP1OPGzUBJ8:BO/Pa8iXA2jCkbj1s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45d59ea76f4b1593a37bdd9fa13dabb8_JaffaCakes118

Files

45d59ea76f4b1593a37bdd9fa13dabb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f8f94652e743a00797ce18a4ecfb977

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CloseHandle
CreateFileA
Sleep
GetTickCount
VirtualAlloc
GetProcAddress
GetCurrentProcess
LoadLibraryExA
GetLastError
VirtualAllocEx
SetFilePointer
GetLocaleInfoA
RtlUnwind
LCMapStringW
LCMapStringA
HeapSize
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
ExitProcess
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
MultiByteToWideChar
VirtualProtect
GetSystemInfo
VirtualQuery
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
ReadFile
QueryPerformanceCounter
GetCurrentThreadId
SetStdHandle

ole32

CoCreateInstance
CoUninitialize
CoInitialize

psapi

GetModuleInformation

msacm32

acmDriverOpen
acmFilterEnumA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 436KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f8f94652e743a00797ce18a4ecfb977

Headers

File Characteristics

Imports

kernel32

ole32

psapi

msacm32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 436KB - Virtual size: 434KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 100KB - Virtual size: 524KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 436KB - Virtual size: 434KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 100KB - Virtual size: 524KB