56aa2884d654300fdd0bea19ebdde2c8_JaffaCakes118

General

Target

56aa2884d654300fdd0bea19ebdde2c8_JaffaCakes118
Size

1023KB
MD5

56aa2884d654300fdd0bea19ebdde2c8
SHA1

9d575d804400b2eb47b502134df48426382207e7
SHA256

1a2e55b61951f10b9f35217206bb3427de72424a518695f95cf2a8c59ca626b6
SHA512

404d2db526dc6d2a936efc7a7e7a318e3e7e9c9c225f93d9a7c8abc360b3f142baa33164ae7fdaa56469e447d3e53cb782bfe64cd356ece354ee3bcf74e357ad
SSDEEP

24576:yEyaAdKD/02O6kMzZHVEIBd2X2mjhEC95rtp:hrRPdtHVlBQX5jd95Zp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56aa2884d654300fdd0bea19ebdde2c8_JaffaCakes118

Files

56aa2884d654300fdd0bea19ebdde2c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99eec95f75791f096be57a8240b1d30d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
Sleep
GetVersionExA
FreeLibrary
LocalFree
LocalAlloc
GetCommandLineA
GetLastError
GetModuleHandleA
GlobalAlloc
GetVersion
GetTickCount
lstrcatA

msvcrt

memmove
_initterm
__p__commode
_exit
wcstoul
wcslen
_acmdln
__set_app_type
_adjust_fdiv
__p__fmode
_c_exit
toupper
_except_handler3
__getmainargs
exit
_XcptFilter
rand
__setusermatherr
__CxxFrameHandler
wcschr

user32

BeginPaint
GetMessageA
GetFocus
DispatchMessageA
EndPaint
PostQuitMessage
LoadIconA

gdi32

ExtTextOutA
SetPixel
MoveToEx
SetBkMode
SetROP2
CreateCompatibleDC
SelectObject
GetStockObject
GetDeviceCaps
CreateFontIndirectA
GetBkColor
LineTo
GetObjectA
DeleteObject
CreateSolidBrush
GetTextColor

Sections

.text
Size: 1024B - Virtual size: 957B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 509B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1015KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99eec95f75791f096be57a8240b1d30d

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

Sections

.text Size: 1024B - Virtual size: 957B

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 3KB

.tls Size: 512B - Virtual size: 509B

.rsrc Size: 1015KB - Virtual size: 2.8MB

.text
Size: 1024B - Virtual size: 957B

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 3KB

.tls
Size: 512B - Virtual size: 509B

.rsrc
Size: 1015KB - Virtual size: 2.8MB