f9146bcbb87e25475b71eac3fa1692d9_JaffaCakes118[.]exe

General

Target

f9146bcbb87e25475b71eac3fa1692d9_JaffaCakes118.exe
Size

90KB
MD5

f9146bcbb87e25475b71eac3fa1692d9
SHA1

a1775e8ac3132de9d8a6f3e6e6d16b1964de194a
SHA256

d933c70339a03843a99962526eb5dc76fea5a81a998689ceb82a60a2ff8d6efd
SHA512

024a20700463ff342f8ca605282c71289bbca0356f97c323cbb2207e0b1c1d7df54c7f6fb3ecf5e5d33f23fb7a0fbf7dc7bb790035aa1678373b73694562a2f1
SSDEEP

1536:kqTyN9rqo02nojHwwha7a7qsLthCBnsFqDqOvBRz1VD7sWdCc:kl9rqIoHy7a7qsLOhsMWOvBRpVnsWdCc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9146bcbb87e25475b71eac3fa1692d9_JaffaCakes118.exe

Files

f9146bcbb87e25475b71eac3fa1692d9_JaffaCakes118.exe
.exe windows:1 windows x86 arch:x86

cd91493d47e70083530169a31fc861c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
SearchPathA
SuspendThread
SwitchToFiber
SwitchToThread
VirtualAlloc
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
LoadLibraryW
ReplaceFileW
GetLocaleInfoW
GetEnvironmentStringsW
GetCurrencyFormatW
FindAtomW
EnumTimeFormatsW
EnumSystemLocalesW
AddAtomW

gdi32

CreateBrushIndirect
DeleteObject
EndDoc
FillPath
GetDeviceCaps
SetBkColor
SetTextColor
StartDocA

user32

CheckDlgButton
EnableMenuItem
GetCursorPos
GetDlgCtrlID
GetMenu
GetSysColor
InvalidateRect
IsDlgButtonChecked
KillTimer
LoadAcceleratorsA
LoadCursorA
MoveWindow
SetWindowPos
SwitchDesktop
TrackPopupMenuEx

advapi32

RegEnumKeyA
RegLoadKeyA

Sections

.text
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mudya
Size: 512B - Virtual size: 371B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.text
Size: 83KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd91493d47e70083530169a31fc861c9

Headers

File Characteristics

Imports

kernel32

gdi32

user32

advapi32

Sections

.text Size: 512B - Virtual size: 64B

.data Size: 1KB - Virtual size: 3KB

.xdata Size: 2KB - Virtual size: 1KB

mudya Size: 512B - Virtual size: 371B

.text Size: 83KB - Virtual size: 85KB

.rsrc Size: 1024B - Virtual size: 732B

.text
Size: 512B - Virtual size: 64B

.data
Size: 1KB - Virtual size: 3KB

.xdata
Size: 2KB - Virtual size: 1KB

mudya
Size: 512B - Virtual size: 371B

.text
Size: 83KB - Virtual size: 85KB

.rsrc
Size: 1024B - Virtual size: 732B