f76162b17a3b0629189d99609196dbd7_JaffaCakes118

General

Target

f76162b17a3b0629189d99609196dbd7_JaffaCakes118
Size

1022KB
MD5

f76162b17a3b0629189d99609196dbd7
SHA1

cc4878d55fe825aad5b55cadda73a5fc0aaa46f6
SHA256

b947fcdb43c11de3418834aa90fc299ce1ac3be89f198dfe01aa41cd284a1788
SHA512

cfe00a7b2d74cc0e7e67b5fe70d82837d5544efc35d36d7f8e6cd6e833822fad11115c8396892445651063c9144219b74179948944a18c3f22cd4206f13fb45d
SSDEEP

12288:aYaiLsIKGRGS5mLeNqOHvLwUXdjyP9Q5paEUsD5+uYxHwpG5CO37FYNsdhD8:nNsIKGRDNhHntjyFQxku+HwUCO37iNIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f76162b17a3b0629189d99609196dbd7_JaffaCakes118

Files

f76162b17a3b0629189d99609196dbd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2811da2b118e9ce548cbb054849f003

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
GetLastError
lstrcpyA
CreateEventA
Sleep
GlobalFree
lstrcatA
LocalAlloc
GetFileSize
GetVersion
GetStartupInfoA
lstrlenA
GetVersionExA
GetModuleHandleA
GetCommandLineA
LocalFree
GetTickCount
FreeLibrary

gdi32

DeleteObject
CreateFontIndirectA
SetROP2
GetStockObject
CreateSolidBrush
GetObjectA
GetTextExtentPoint32A
BitBlt
MoveToEx
SelectObject
GetPixel

user32

DialogBoxParamA
DestroyWindow
EndPaint
GetClientRect
BeginPaint
TranslateMessage
MessageBoxA
ShowWindow
PostQuitMessage
GetMessageA

Sections

.text
Size: 1024B - Virtual size: 955B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 457B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1015KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2811da2b118e9ce548cbb054849f003

Headers

File Characteristics

Imports

kernel32

gdi32

user32

Sections

.text Size: 1024B - Virtual size: 955B

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 3KB

.tls Size: 512B - Virtual size: 457B

.rsrc Size: 1015KB - Virtual size: 2.8MB

.text
Size: 1024B - Virtual size: 955B

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 3KB

.tls
Size: 512B - Virtual size: 457B

.rsrc
Size: 1015KB - Virtual size: 2.8MB