04ab506e5fe651cbd0744b43d85884c0_JaffaCakes118

General

Target

04ab506e5fe651cbd0744b43d85884c0_JaffaCakes118
Size

40KB
MD5

04ab506e5fe651cbd0744b43d85884c0
SHA1

11752dc36f6153ef900e4eb8a148277e9b90a6f3
SHA256

d08678f034e72e487485fc71aff91ec0c5d86d233fc64d23fa59ffa3e184987e
SHA512

886d2157258e49c4731c904f004950982f43effc7acf2ed8df80b13fa8218b7156dc4afa9071a087724924f32fb948932f215fc30e9560945218095ede92bea3
SSDEEP

768:a7gXhLj4wGH4EGU7gXhLj4wGH4EGU7gXhLj4wGH4EG:a7gtjhEGU7gtjhEGU7gtjhEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04ab506e5fe651cbd0744b43d85884c0_JaffaCakes118

Files

04ab506e5fe651cbd0744b43d85884c0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d5bcd26e9bd47970003412c4ddbd0a47

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFileTime
GetFileTime
GetProcAddress
LoadLibraryA
LocalAlloc
lstrcpyA
lstrcatA
Sleep
CreateThread
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetFileSize
CreateFileA
MultiByteToWideChar
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
WriteFile
GetTickCount
ReadFile
CloseHandle

user32

RegisterClassExA
LoadCursorA
UnregisterClassA
MessageBoxA
GetKeyboardLayout
GetKeyboardLayoutList
SystemParametersInfoA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA

msvcrt

strrchr
_except_handler3
strcat
strlen
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
memset
strcpy
atoi

imm32

ImmIsIME

Exports

Exports

CandWndProc
CompWndProc
IMEClearPubString
IMESetPubString
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc
pfjieaoidjglkajd

Sections

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5bcd26e9bd47970003412c4ddbd0a47

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

imm32

Exports

Exports

Sections

.bss Size: - Virtual size: 1KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 1024B - Virtual size: 1010B

.bss
Size: - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 1024B - Virtual size: 1010B