f266042de7bdc7c331ed6b58dd7ceb76_JaffaCakes118

General

Target

f266042de7bdc7c331ed6b58dd7ceb76_JaffaCakes118
Size

27KB
MD5

f266042de7bdc7c331ed6b58dd7ceb76
SHA1

01ca36767b3f45762901db62d2b505173db724ae
SHA256

773198d93045b2bc232e66a87856a05283e7dae72f35dcc59e127495bd1c0126
SHA512

e40cf134cf42eaa542ad7adc709c7cf18559ac5adb42baa184f271c6ca7d8f684047de63b657cd8b8e6f50b5ff1cc42150e94ebd44ed6ef19f44d502471be626
SSDEEP

768:HdD61jOkwPITni2QcXezwwBYhs89QoIu7S:puakwP5bcbwBl89XIt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f266042de7bdc7c331ed6b58dd7ceb76_JaffaCakes118

Files

f266042de7bdc7c331ed6b58dd7ceb76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b46dcd0175ba1e891a705bbe4a6f5a00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetACP
CreateFileA
GetStringTypeA
GetFileType
WriteFile
MultiByteToWideChar
LCMapStringA
GetOEMCP
lstrcpyA
GetCommandLineA
TerminateProcess
SetHandleCount
GetStringTypeW
GetCurrentProcess
SetFilePointer
lstrcpynW
GetStartupInfoA
GetVersion
lstrcpynA
GetModuleFileNameA
LCMapStringW
lstrcatA
GetCPInfo

user32

GetWindowTextLengthA
DialogBoxParamA
GetCursor
CopyIcon
DrawTextA
EndDialog
LoadCursorA
GetWindowTextA
CopyRect
DrawIconEx
GetFocus
CreateIcon
GetDlgItem
IsWindow
IsMenu
GetDC
InsertMenuA
LoadMenuA
DrawTextW
DrawIcon
DialogBoxParamW
GetMenu
CopyImage
CloseWindow

comctl32

ImageList_Destroy
DrawStatusTextW
ImageList_EndDrag
CreateMappedBitmap
ImageList_Add
ImageList_LoadImageA
CreateToolbarEx
ImageList_GetIcon
ImageList_LoadImageW
DllGetVersion

advapi32

RegOpenKeyExW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyA
RegCreateKeyA
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b46dcd0175ba1e891a705bbe4a6f5a00

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 18KB - Virtual size: 17.2MB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 18KB - Virtual size: 17.2MB