f81652f91997cd208651ae3ba5ef4bcf_JaffaCakes118

General

Target

f81652f91997cd208651ae3ba5ef4bcf_JaffaCakes118
Size

201KB
MD5

f81652f91997cd208651ae3ba5ef4bcf
SHA1

a39c30e67caf84a41e55f6ef459979efe1998691
SHA256

b0ec8f0bc704384ed89353d67c58f65a5bf51853dff2ccd20c658a0756df3a37
SHA512

6412720bb2365d71043c88a21317ad4eee764527c2207f2e0b611ee89d489e687d514676254eb1a3e03130a1395a9a41b452501311b62414e4ab270a8183b6b2
SSDEEP

3072:KUjkcyo1vPUXT5um3MUgE95DPWRsf/tchCrXE3gVm:KmvPa5x8UgcjWyflchCrUZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f81652f91997cd208651ae3ba5ef4bcf_JaffaCakes118

Files

f81652f91997cd208651ae3ba5ef4bcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1fb0af9a3d4f195b5668cdf9afc7a217

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerLanguageNameA
GlobalAlloc
GetProcAddress
WaitForMultipleObjects
LoadLibraryA
RaiseException
GetStringTypeW
lstrcmpiA
GetLastError
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
lstrlenA
GetComputerNameA
SetHandleInformation
CloseHandle
GetStringTypeA
CreateFileA
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentThreadId
LCMapStringW
GetUserDefaultLangID
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
HeapSize

user32

GetGUIThreadInfo
IsWindowEnabled
PostMessageA
IsClipboardFormatAvailable
wsprintfA
GetMenu
GetMenuItemID
EnableMenuItem
OpenIcon
GetParent

gdi32

CreateCompatibleDC
GetStockObject
GetObjectA
CreateFontA
CreateSolidBrush

comdlg32

ChooseColorA

advapi32

GetSecurityInfo
GetUserNameA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fb0af9a3d4f195b5668cdf9afc7a217

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 175KB - Virtual size: 174KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 175KB - Virtual size: 174KB