53e1f37b46e72079264cb37a4c42a98f_JaffaCakes118

General

Target

53e1f37b46e72079264cb37a4c42a98f_JaffaCakes118
Size

419KB
MD5

53e1f37b46e72079264cb37a4c42a98f
SHA1

f9733c6ad82967a407085f97ce8a9f2fc1403fed
SHA256

215b4e4d6298c4aeec80829619947db170b8b30cdc772f412bdd37274e48c57f
SHA512

56da1de90e07471b5d58cd26b8f9bc22a66c0f3b8a05cf5a325697e3ff5daa39b92cea1b36b69f499ff353bd7380568bedd0f1b1a9a0dfcdc7a649524ee57a07
SSDEEP

6144:q6eSMknK6RypVJEG2U01pQr+qVu2L3/W837y1x8CuQoWH0R46u4OOiCA:q6eSv6JEGR01pUu+3/l7haI46ugiF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53e1f37b46e72079264cb37a4c42a98f_JaffaCakes118

Files

53e1f37b46e72079264cb37a4c42a98f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48815ffbe4fa420b532dff3e09f51109

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
FileTimeToLocalFileTime
GetFileAttributesA
GetVersion
InterlockedCompareExchange
HeapCreate
GetShortPathNameA
GetTempPathA
FreeLibrary
HeapAlloc
GetVolumeInformationA
HeapValidate
InterlockedIncrement
PrepareTape
GetLogicalDriveStringsA
Sleep
GetLocalTime
GetCurrentThreadId
LoadLibraryA
WaitForMultipleObjects
GetProcAddress
HeapFree
CreateFileA
CreateEventA
GetEnvironmentVariableA
SetFileAttributesA
GetLastError
CloseHandle
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
GetFileType
SetHandleCount
GetStdHandle
DeleteCriticalSection
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
ReadFile
VirtualAlloc
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
RaiseException

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 538KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48815ffbe4fa420b532dff3e09f51109

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 182KB - Virtual size: 181KB

.data Size: 161KB - Virtual size: 538KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 182KB - Virtual size: 181KB

.data
Size: 161KB - Virtual size: 538KB

.rsrc
Size: 1KB - Virtual size: 1KB