520bdc4a346665460374b6500a835856_JaffaCakes118

General

Target

520bdc4a346665460374b6500a835856_JaffaCakes118
Size

94KB
MD5

520bdc4a346665460374b6500a835856
SHA1

1668e79e72765df36cdb668d02b7b6da289e5686
SHA256

b5957602d905ff68ebab987528973c57feb3c212d61c0295e4b9a858037b2220
SHA512

50f37da447c17d3e3f817cda8f4b89cdaeee6d83d63460f57654517ad2ff94df1d6e6692f1026cc4569bc6112ef8861ff711e25b4c931d1ca15aeb860e2eefe8
SSDEEP

1536:ytRHkde8Op8XBGZx6TognD46G1tbQfHXn/LeCBSPK:ytm7bogU6G1tby/LeC0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
520bdc4a346665460374b6500a835856_JaffaCakes118

Files

520bdc4a346665460374b6500a835856_JaffaCakes118
.dll windows:4 windows x86 arch:x86

771216ca7254e4ecba3cefcae648d378

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
GetStringTypeA
LCMapStringW
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

LoadStringW

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

771216ca7254e4ecba3cefcae648d378

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 44KB - Virtual size: 77KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 44KB - Virtual size: 77KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 2KB - Virtual size: 1KB