f29588ed907fa51db371b6569d580b5c_JaffaCakes118

General

Target

f29588ed907fa51db371b6569d580b5c_JaffaCakes118
Size

56KB
MD5

f29588ed907fa51db371b6569d580b5c
SHA1

75915eaf2fc74dccd7f5abd615d3f71c770f5320
SHA256

4cac7d90fa708a99feab013ee016bc12332047dfb8f7d438c86e789fad98add9
SHA512

18ac9fac4e91bab91dbbd3ce86f4bfa536ab6d117731e4c6ae6a2781129f9446ccec0b0446d92a9768950d353878113c7a66dd4a500dcb02956a47c8f8364bc2
SSDEEP

1536:H8P7qWjZkemO/2fBJdi/FXw41JblXbGEr4HV+edoK9N:Hu+WjZ5+p3i/F981pBN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f29588ed907fa51db371b6569d580b5c_JaffaCakes118

Files

f29588ed907fa51db371b6569d580b5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7fe44cac0dcb2a884b0da8156094436

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
ResetEvent
VirtualFree
FileTimeToSystemTime
WritePrivateProfileStringW
GetTickCount
GetModuleFileNameW
FindResourceW
WideCharToMultiByte
WaitForSingleObject
ResumeThread
FindFirstFileW
GetProcAddress
SetLastError
GetLastError
Sleep
CreateWaitableTimerW
MultiByteToWideChar
CloseHandle
FreeResource
ReadFile
QueryDosDeviceW
DuplicateHandle
GetFileAttributesExW
LoadResource
SizeofResource
LoadLibraryA

user32

DialogBoxParamW
SetCapture
GetDlgItem
RegisterHotKey
IsDlgButtonChecked
SetCursor
OffsetRect
CreateWindowExW
GetMessageW
CreatePopupMenu
LoadStringW
SendMessageW
UpdateWindow
SendDlgItemMessageW
SetLayeredWindowAttributes
DrawTextW
PostQuitMessage
GetSysColor
ReleaseCapture
SetCursorPos
GetParent
DispatchMessageW
SetWindowPos
SetWindowTextW

gdi32

CreateCompatibleDC
DPtoLP
SelectObject
SetBkColor
CreatePen
GetObjectW
CreateRoundRectRgn
CreateDCW
GetMapMode
GetClipBox
CreateSolidBrush
LineTo
GetStockObject
GetDeviceCaps

advapi32

GetUserNameW
LookupAccountSidW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExW

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a7fe44cac0dcb2a884b0da8156094436

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB