45b583d58c21a53a49a3961729f1b4c9_JaffaCakes118

General

Target

45b583d58c21a53a49a3961729f1b4c9_JaffaCakes118
Size

184KB
MD5

45b583d58c21a53a49a3961729f1b4c9
SHA1

7a371289551f21e246c29cf57b1714a02d79cd18
SHA256

c9e6a7dd1735b01180b0b96cfa8bcffb4499f299f705302b8dd6f1fb1d5404ed
SHA512

0bc8f031e22b4326c09fdf8442e3cd05eb62cee7e09d24c5460a76287e1a7f759989eae0e3fe31084641f5cbc7ea528ddbedd609141893d179b6aa16be9c1329
SSDEEP

3072:JDsq11CalT8cq+0lwe3gEukyB0cUDgLUckINDkB0ZxMcpkdR7A05YPfcUPu:W4cDcq+0PYBXUDgZZNuAecpko0MPu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45b583d58c21a53a49a3961729f1b4c9_JaffaCakes118

Files

45b583d58c21a53a49a3961729f1b4c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8691050e00e4a4975b1a701969a4d75d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateFileW
SetFilePointer
WriteFile
GetFileSize
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTickCount
WriteProcessMemory
TlsSetValue
SetThreadContext
GetThreadContext
VirtualAlloc
GetProcAddress
LoadLibraryA
GetLastError
GetModuleFileNameW
GetSystemTime
lstrcatA
GetWindowsDirectoryA
ResumeThread
TlsGetValue
TlsAlloc
CreateThread
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetSystemInfo
MultiByteToWideChar
LCMapStringA
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
HeapSize

user32

wsprintfA
GetWindowRect
GetWindowRgn

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8691050e00e4a4975b1a701969a4d75d

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 170KB

.rsrc Size: 4KB - Virtual size: 640B

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 170KB

.rsrc
Size: 4KB - Virtual size: 640B