f87bf10d8e698aa037190c0b8a7ae8c2_JaffaCakes118

General

Target

f87bf10d8e698aa037190c0b8a7ae8c2_JaffaCakes118
Size

41KB
MD5

f87bf10d8e698aa037190c0b8a7ae8c2
SHA1

4e114bb9060dab9ea823549afc0a1e27ff6b9a9b
SHA256

eb469ad56df81323868465c624ce7ee8e83ae5a4c76f36b9eed3776be6d4d378
SHA512

2b9a1c5eadf45d7885d237670d95c732de182d8dcb6fba0359e2c57fde821d8c387db5117454a4994eed0862a7ad17c4fb75997c7bf1ee043544952ddbb5c4f7
SSDEEP

768:2Gb3YiHZBsOZxApggraiIFq1ge/rXl3v0/8evN86GXsI:2GbTZBbAWFq1hjxa/vNHGXF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f87bf10d8e698aa037190c0b8a7ae8c2_JaffaCakes118

Files

f87bf10d8e698aa037190c0b8a7ae8c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96ff2536aed26bed0cdf431112742a34

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PeekNamedPipe
VirtualProtect
GetPrivateProfileStructW
EnumSystemLanguageGroupsW
UTUnRegister
FlushFileBuffers
GetPrivateProfileSectionW
GlobalCompact
SetInformationJobObject
AddConsoleAliasA
GetCommTimeouts
GetPrivateProfileIntA
HeapDestroy
Module32Next
GlobalFlags
CallNamedPipeW
_hread
GetLastError
GetLogicalDriveStringsA
LockFileEx
GetACP
GetConsoleOutputCP
MoveFileW
CreateTimerQueueTimer
SetCalendarInfoW

user32

EndMenu
RegisterServicesProcess
GetDlgItemTextA
WindowFromPoint
SetCursor
EnumPropsW
GetScrollPos
DlgDirListComboBoxA
IntersectRect
VkKeyScanA
GetWindowTextA
MessageBoxIndirectW
GetWindowRgn
SetShellWindowEx
PeekMessageW
ReleaseDC
GetWindowInfo

gdi32

CreateBitmap
SetDIBitsToDevice
SetStretchBltMode
EnumFontFamiliesA
EngDeletePalette
GetTextExtentExPointWPri
OffsetWindowOrgEx
ExtFloodFill
CreateHalftonePalette
PolyPatBlt
CreateScalableFontResourceA
SetMiterLimit
GdiInitSpool
GetEUDCTimeStamp
EnumObjects
GdiEntry5
GetColorAdjustment
GetTextExtentPointA
CancelDC
EngGetDriverName
cGetTTFFromFOT
GetStringBitmapA
STROBJ_bEnumPositionsOnly
GdiEntry8
PlayMetaFile
EngTextOut
CreateEllipticRgnIndirect
GetBkColor

comdlg32

WantArrows
GetOpenFileNameA
LoadAlterBitmap
dwOKSubclass
PageSetupDlgW
PrintDlgExA
GetFileTitleA
PrintDlgW
FindTextA
ReplaceTextW
ChooseColorW
GetSaveFileNameA

Sections

.text
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

96ff2536aed26bed0cdf431112742a34

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 4KB - Virtual size: 44KB

.data Size: 33KB - Virtual size: 36KB

.idata Size: 3KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 44KB

.data
Size: 33KB - Virtual size: 36KB

.idata
Size: 3KB - Virtual size: 4KB