8cc749f129f1003c074a8383063ce3f5_JaffaCakes118

General

Target

8cc749f129f1003c074a8383063ce3f5_JaffaCakes118
Size

65KB
MD5

8cc749f129f1003c074a8383063ce3f5
SHA1

d89de513689038cae4717373d0a919bd91d7e930
SHA256

0f21efaf6570193ad4d509e1d54b927e21415100ed530155e4f040e978d94e2b
SHA512

0cc79b2ab0e5a6b6b0c1f4f8ceb10db5d9148ba880ff065e888ea20f909327770f61fdc5582bd18b129c9cfa2df4da31a538d04e606d97cf212821f1f16be5cd
SSDEEP

1536:PUSStXdT9ATBhYZxRr3FU+8tc8uaWAOGW:MrXKB0xRbFU+85vWAOGW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cc749f129f1003c074a8383063ce3f5_JaffaCakes118

Files

8cc749f129f1003c074a8383063ce3f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5834a4224ff0aefd87bd01d338033d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
RegisterClassExA
BeginPaint
GetWindowRect
MoveWindow
EndPaint
PostQuitMessage
LoadCursorA
DefWindowProcA
DestroyWindow
LoadBitmapA
SendMessageA
CreateWindowExA
ShowWindow
UpdateWindow
MessageBoxA
SetWindowTextA
LockWindowUpdate
OpenClipboard
MapWindowPoints
GetCursorPos
ShowCaret
GetActiveWindow
RegisterClassA
SetWindowLongA
ModifyMenuA
SetDlgItemTextA

kernel32

InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapAlloc
WriteFile
RtlUnwind
HeapFree
GetStartupInfoA
MapViewOfFile
lstrlenA
lstrcmpA
SleepEx
GetCurrentDirectoryA
CreateFileA
lstrcpynA
GetModuleHandleA
GetLastError
GetOEMCP
FreeEnvironmentStringsA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree

comctl32

ord17

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5834a4224ff0aefd87bd01d338033d2

Headers

File Characteristics

Imports

user32

kernel32

comctl32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 14KB - Virtual size: 14KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 14KB - Virtual size: 14KB