9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118

General

Target

9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118
Size

532KB
MD5

9860a4d8b34096e1c1954527b8bb6301
SHA1

0aee4f758ff00f60e8a79781fe1677c8cf8869d0
SHA256

3a4d9f780c0ba89d1835687f7b8e45d0ff231d1283787ee73c393d4f270e3421
SHA512

d14d4602633325a340563c30a7090a7e573151dbbcb91b00b523660d43d281b64c9a1e7c42465e5a78306b4ea8ab13ab3bb71c347dc2bde7ee33d76aa8c20220
SSDEEP

12288:n5DQC/70wpPCa/QK6otHbz+13tYRJZy7C6Cx7jPtW:5DdozaYUtH3o3tYRbj6CVjPtW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118

Files

9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62501ad13b335a5f311c95842289c60a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Download\test777\reserve1\Release\reserve1.pdb

Imports

imagehlp

MapFileAndCheckSumA

kernel32

HeapCreate
VirtualProtect
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetTickCount
CloseHandle
SetStdHandle
ExitProcess
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
HeapReAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
RtlUnwind
VirtualQuery
HeapDestroy
GetSystemInfo
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
LoadLibraryA
GetOEMCP
GetCPInfo
FlushFileBuffers
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 464KB - Virtual size: 509KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62501ad13b335a5f311c95842289c60a

Headers

File Characteristics

PDB Paths

Imports

imagehlp

kernel32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 464KB - Virtual size: 509KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 464KB - Virtual size: 509KB

.rsrc
Size: 4KB - Virtual size: 1KB