aa7f7bb3b1f98ff38f61899094dc07cd_JaffaCakes118

General

Target

aa7f7bb3b1f98ff38f61899094dc07cd_JaffaCakes118
Size

721KB
MD5

aa7f7bb3b1f98ff38f61899094dc07cd
SHA1

68503495193bf67e3efc11659be47f948f310631
SHA256

3a000691ff9a1bb4bc27ce0135f3ced026587e62e19849f8419bd32573d02283
SHA512

0680c34c06e43a094d43af99dc7615e73bb82814731b92182398dc5c1f75ac214a687a71da8afaab1bb66d198be776ba33301f60191bc9700fd1d486f238ab99
SSDEEP

12288:HDk+z/rXe4j+kRIXDYeopObMpUdz8SqPNQYPFpIj:HDkc/Le3fwKiWPqPNnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa7f7bb3b1f98ff38f61899094dc07cd_JaffaCakes118

Files

aa7f7bb3b1f98ff38f61899094dc07cd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

be457d96bc2de5ff9e8880e675c07f65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindow

kernel32

GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetTimeZoneInformation
HeapReAlloc
HeapCreate
HeapDestroy
SetLastError
TlsFree
TlsAlloc
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
SetUnhandledExceptionFilter
LoadLibraryA
TerminateProcess
GetProcessHeap
GetVersionExA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
CompareStringW
HeapSize
DeleteCriticalSection
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
GetProcAddress
GetModuleHandleA
LCMapStringA
LCMapStringW
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
SetEnvironmentVariableA
GetCurrentProcess
GetSystemDEPPolicy
TlsGetValue
TlsSetValue
CloseHandle
CreateFileA
GetFileType
GetStdHandle
RaiseException
ReadFile
RtlUnwind
SetFilePointer
UnhandledExceptionFilter
WriteFile
ExitProcess
GetCommandLineA
GetLastError
GetLocaleInfoA
GetModuleFileNameA

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 609KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be457d96bc2de5ff9e8880e675c07f65

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 78KB - Virtual size: 78KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 609KB - Virtual size: 744KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 78KB - Virtual size: 78KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 609KB - Virtual size: 744KB

.rsrc
Size: 16KB - Virtual size: 15KB