fc815b20ba4f56bfd6c71f9ca9a5016e_JaffaCakes118

General

Target

fc815b20ba4f56bfd6c71f9ca9a5016e_JaffaCakes118
Size

48KB
MD5

fc815b20ba4f56bfd6c71f9ca9a5016e
SHA1

84a6ca6e519e6d905c359ff2bb195bebd276cf31
SHA256

7bfc6dcca3900f62e1c0d5fb47c0e4266e535e3e0070e1072c63ed9efa7a53db
SHA512

a539ee6837a3f37d235bc294d7c6060868500e80a1d50bf716975b2949bcd85adb029fe4c0b869e556e63bfc6791e9bfa2aad60dd4a3a248fba5fdb12e705153
SSDEEP

384:36f1xPssp2iqQFGfQMf1kbAFXdd9Tt5CqeBTZC4S+WmA/P3j6pEHWj/DLv0AI4kx:36UiBAqCdjt5mE0A/76pEEDYNCCEy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc815b20ba4f56bfd6c71f9ca9a5016e_JaffaCakes118

Files

fc815b20ba4f56bfd6c71f9ca9a5016e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

538b8b64789ef6a1183821bca32835f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExA

kernel32

GetFileAttributesA
ExpandEnvironmentStringsA
LoadLibraryA
lstrlenA
lstrcpyA
FormatMessageA
FreeLibrary
GetProcAddress
LocalAlloc
lstrcmpiA
GetLastError
LocalFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
TerminateProcess
lstrcpynA
GetModuleHandleA
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
GetCurrentProcess
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LCMapStringA
LCMapStringW
HeapFree
HeapAlloc
GetStringTypeA
GetStringTypeW
VirtualAlloc
UnhandledExceptionFilter
SetHandleCount

user32

IsDlgButtonChecked
SendMessageA
ShowWindow
GetDlgItem
SetDlgItemTextA
LoadStringA
MessageBoxA
DialogBoxParamA
EndDialog
SetWindowLongA
PeekMessageA
GetWindowLongA
EnableWindow
DefWindowProcA
IsWindowEnabled
PostMessageA
TranslateMessage
DispatchMessageA

comctl32

ord17

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

538b8b64789ef6a1183821bca32835f7

Headers

File Characteristics

Imports

advapi32

kernel32

user32

comctl32

Sections

.text Size: 20KB - Virtual size: 19KB

.data Size: 12KB - Virtual size: 10KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 12KB - Virtual size: 12KB