ec6215d34af5765f909631cdddd73768_JaffaCakes118

General

Target

ec6215d34af5765f909631cdddd73768_JaffaCakes118
Size

88KB
MD5

ec6215d34af5765f909631cdddd73768
SHA1

a2ca06f87a005415455fc2d8c059fb44b029599d
SHA256

57b563d6de85f67881cca874447092392a017cbf9aa21250beab062f97661dea
SHA512

8e0df42e4d185baec085551d982cbd030c73ca16b7f573838c154055552ce95c8fb0aa49356e3f175d102de0ba77c82ff8e0b6715170b279e8bc4234daf68f3b
SSDEEP

1536:YiM3Pp2jZSifXOmvsfa32SckT43BoARBjQmPXRW:YTPOpPOmvia3kdxrjUmPX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec6215d34af5765f909631cdddd73768_JaffaCakes118

Files

ec6215d34af5765f909631cdddd73768_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df38bda2461f9613bcef824830224edb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ExtTextOutA
GetPixel
CreatePalette
GetClipBox
CreateBitmap
CreateHalftonePalette
DeleteObject
CreateCompatibleBitmap
CreateDIBitmap
GetDCOrgEx
RestoreDC
GetCurrentPositionEx
GetBitmapBits
SetTextColor
CreatePenIndirect
CreateBrushIndirect
DeleteDC
GetPixel
GetBrushOrgEx
CreateFontIndirectA
ExcludeClipRect
CreateCompatibleDC
CreateDIBSection
CreateSolidBrush

kernel32

DeleteFileA
Sleep
GetCommandLineA
GetComputerNameA
SetLastError
WriteFile
ReadFile
FindAtomA
GetCPInfo
GetFileSize
GetConsoleMode
ExitThread
DeleteAtom
CreateThread
GlobalFree
GetFileTime
OpenFile
ReadConsoleA
CreateProcessA
GetStdHandle
FindFirstFileA
DeleteFileW
GetLastError
OpenFileMappingA

comctl32

ImageList_DragEnter
CreateUpDownControl
DllGetVersion
CreateToolbarEx
DrawStatusTextW
DrawStatusText
ImageList_Add
ImageList_LoadImageW
ImageList_LoadImageA
CreateMappedBitmap
ImageList_GetIconSize
CreateStatusWindow
ImageList_DrawEx
ImageList_AddIcon
CreateToolbar
InitCommonControls
CreateStatusWindowW
ImageList_Destroy
ImageList_Draw
MenuHelp
ImageList_EndDrag
ImageList_Create
ImageList_GetIcon
ImageList_Copy

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 20.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df38bda2461f9613bcef824830224edb

Headers

File Characteristics

Imports

gdi32

kernel32

comctl32

Sections

.text Size: 23KB - Virtual size: 23KB

.data Size: 55KB - Virtual size: 55KB

.tls Size: 1KB - Virtual size: 20.4MB

.rdata Size: 4KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 23KB

.data
Size: 55KB - Virtual size: 55KB

.tls
Size: 1KB - Virtual size: 20.4MB

.rdata
Size: 4KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 1KB