649e3c7471ad1606fd25cb0a1c6f67fb_JaffaCakes118

General

Target

649e3c7471ad1606fd25cb0a1c6f67fb_JaffaCakes118
Size

642KB
MD5

649e3c7471ad1606fd25cb0a1c6f67fb
SHA1

442f3408f629d3877208062daba9bc887e4ded22
SHA256

4567963244028499311d8b05a483aab1ed550f0a9e945074d1a71426ddc1039d
SHA512

7329216f713fe69df33c13151ecba41fc9722bb90c5a5a82532e91f37239a53d0fb6bd68c770209a91985d206ed06cc9d28fa20a2529b5ffa480639a34fa0416
SSDEEP

12288:fxBputUUZyTYqC3XpYYm9E0lvjaE9zt6WxF6dBRlz:fx4ZfqmXOf9E0lLaE9ztXqRl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
649e3c7471ad1606fd25cb0a1c6f67fb_JaffaCakes118

Files

649e3c7471ad1606fd25cb0a1c6f67fb_JaffaCakes118
.exe windows:6 windows x86 arch:x86

90045948f2ffabc2b7089e09ac81684a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsProcessorFeaturePresent
GetUserDefaultLCID
IsValidCodePage

comctl32

InitCommonControlsEx

imm32

ImmSimulateHotKey

iphlpapi

InternalDeleteIpForwardEntry

user32

MoveWindow
GetSubMenu
WaitMessage
LoadIconW
GetDlgItemTextW
BeginPaint
CheckDlgButton
GetDC
UpdateWindow
PtInRect
MessageBoxW
ReleaseCapture
IsDlgButtonChecked
GetWindowPlacement
WinHelpW
SendMessageW
LoadBitmapW
GetMessageW
FrameRect
SetDlgItemTextW
InvalidateRect
GetDlgItem
DispatchMessageW
GetMenu
DestroyWindow
DialogBoxParamW
DrawTextW
RegisterClassW
InvertRect
PeekMessageW
UnionRect
CreateWindowExW
wsprintfW
EndDialog
OffsetRect
GetForegroundWindow
GetClientRect
LoadAcceleratorsW
FillRect
EnableMenuItem
EndPaint
DefWindowProcW
GetDesktopWindow
IntersectRect
GetSystemMetrics
ShowWindow
GetWindowRect
LoadCursorW
TranslateAcceleratorW
CheckRadioButton
SetRect
SetCapture
DrawMenuBar
IsZoomed
PostMessageW
ReleaseDC

Sections

.text
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90045948f2ffabc2b7089e09ac81684a

Headers

File Characteristics

Imports

kernel32

comctl32

imm32

iphlpapi

user32

Sections

.text Size: 242KB - Virtual size: 242KB

.data Size: 205KB - Virtual size: 568KB

.rdata Size: 26KB - Virtual size: 25KB

.rsrc Size: 168KB - Virtual size: 167KB

.text
Size: 242KB - Virtual size: 242KB

.data
Size: 205KB - Virtual size: 568KB

.rdata
Size: 26KB - Virtual size: 25KB

.rsrc
Size: 168KB - Virtual size: 167KB