f3ad25e8054bd559b7b41980a9a00fc1_JaffaCakes118

General

Target

f3ad25e8054bd559b7b41980a9a00fc1_JaffaCakes118
Size

26KB
MD5

f3ad25e8054bd559b7b41980a9a00fc1
SHA1

18df8380e7867d3681ce3c4798ba954c9a67a3f8
SHA256

7d58a5b8f472bc69eb2e5935410fc260bd650d3c4c68672d1ecda72c56acf0f7
SHA512

02364f31bb1863bdad107c960daccc666f5b4ba54a37230e103782242c44e9b25875b616e0d18d31bad007c5c71353e5930de85fce4355d1ec6dc688aee5056e
SSDEEP

384:TTOvdiSH8GHaFT9+YTxubEAmf3IZwWGJZ2DrNxBgHd1:TTOvkSH8GHa3uEAmfYZ42Ptgr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3ad25e8054bd559b7b41980a9a00fc1_JaffaCakes118

Files

f3ad25e8054bd559b7b41980a9a00fc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f25f13d2d1290265de8917a671538f36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
GetCursor
DialogBoxParamA
IsMenu
DrawIconEx
GetFocus
GetDlgItem
CopyImage
CopyRect
DrawTextA
CreateIcon
GetMenu
DialogBoxParamW
GetDC
LoadMenuA
IsWindow
DrawTextW
GetWindowTextLengthA
EndDialog
CopyIcon
GetWindowTextA
InsertMenuA
CloseWindow

kernel32

GetCurrentProcess
GetCPInfo
GetStdHandle
lstrcpynA
GetCommandLineA
GetStringTypeW
SetFilePointer
MultiByteToWideChar
lstrcatA
LCMapStringW
GetACP
GetOEMCP
SetHandleCount
CreateFileA
lstrcpynW
LCMapStringA
GetStartupInfoA
GetStringTypeA
GetFileType
GetVersion
WriteFile
lstrcpyA

comctl32

ImageList_LoadImageA
ImageList_LoadImageW
ImageList_GetIcon
CreateToolbar
DllGetVersion
DrawStatusText
DrawStatusTextW
CreateStatusWindow
CreateToolbarEx
ImageList_Destroy
InitCommonControls
ImageList_EndDrag
ImageList_AddIcon

advapi32

RegEnumKeyExA
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegOpenKeyW
RegOpenKeyA
RegEnumValueA
RegCreateKeyExW
RegQueryValueExA
RegSetValueW
RegOpenKeyExA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f25f13d2d1290265de8917a671538f36

Headers

File Characteristics

Imports

user32

kernel32

comctl32

advapi32

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 17KB - Virtual size: 17.4MB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 17KB - Virtual size: 17.4MB