f90063de7c2795f5ac1bc10ad73a004a_JaffaCakes118

General

Target

f90063de7c2795f5ac1bc10ad73a004a_JaffaCakes118
Size

89KB
MD5

f90063de7c2795f5ac1bc10ad73a004a
SHA1

6492718d7dc936495a21634810e5e3817ddf16e5
SHA256

1bdbf38e1832a1d52374b611142a2e2f538d8e6bdc97cd0e7d7b158428e37a01
SHA512

facc8804b7bcdb417162fd84669db69b55de39c265ad51517ad46017014bb3c477b6d12c62de3022c5e853763228f64227c021bb66b426e8843e5b621a32fbf0
SSDEEP

768:vz+endi2gWEycST6tFlJI3TvegRGFKPWcfd8MKOBbm0eX04iXpNCKueb:ie4hHyc26l4nPWhMHBbm0eX04iXpN1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f90063de7c2795f5ac1bc10ad73a004a_JaffaCakes118

Files

f90063de7c2795f5ac1bc10ad73a004a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9bee305d79a380b1bf359f1aba81541

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetACP
SetFilePointer
LoadLibraryA
FreeLibrary
GetOEMCP
FormatMessageA
GetCurrentThreadId
CompareStringA
LocalReAlloc
WaitForSingleObject
GetTickCount
VirtualAlloc
GetModuleFileNameA
LoadResource
ExitProcess
CreateFileA
VirtualAllocEx
GetVersion

msvcrt

malloc
clock
wcscspn
memmove
calloc
mbstowcs
wcschr
memcpy
memset

advapi32

RegQueryValueA
GetUserNameA
RegQueryValueExA
GetLengthSid

gdi32

SetPixel
CreatePalette
CreatePenIndirect

user32

EnumThreadWindows
RegisterClassA
GetClassLongA
IsChild
BeginDeferWindowPos
IsMenu
ClientToScreen
EnableMenuItem
IsDialogMessageA
GetWindowTextA
GetWindow
GetClipboardData
SetWindowPos
GetMenuItemInfoA
GetClassInfoA
CreateMenu

shell32

Shell_NotifyIconA
SHGetDesktopFolder
SHGetFileInfoA

comdlg32

GetFileTitleA
FindTextA
GetOpenFileNameA
GetSaveFileNameA

Sections

BSS
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9bee305d79a380b1bf359f1aba81541

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

gdi32

user32

shell32

comdlg32

Sections

BSS Size: 12KB - Virtual size: 12KB

DATA Size: 67KB - Virtual size: 67KB

.data Size: 5KB - Virtual size: 33KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 571B

BSS
Size: 12KB - Virtual size: 12KB

DATA
Size: 67KB - Virtual size: 67KB

.data
Size: 5KB - Virtual size: 33KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 571B