06e69bfb6fffa17c4fc1e23af71b345c_JaffaCakes118

General

Target

06e69bfb6fffa17c4fc1e23af71b345c_JaffaCakes118
Size

90KB
MD5

06e69bfb6fffa17c4fc1e23af71b345c
SHA1

62ed1745fc85733865cf3fa530b30d7ee6f1e2a5
SHA256

8b0a1d1365ceb601839ba0c6ea33dbd2375a02871683c7aad066538e29ac03a8
SHA512

68ea9ab1cc0ac142b87714d446dead6a60facd29ef663315ef5a7ec8a2ae7cc1ab4ba853ef469f279beada2055559870afa3200d3b7fe78d8e171f75cbdedd3e
SSDEEP

1536:mNElC2lS1fhI7aRdHjoHITQPXlj8h86wq9IqZCYAaMzvu6tcQJoVSOwJ9Yb:myzS5LTDoo09whYkgLzt0C98

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06e69bfb6fffa17c4fc1e23af71b345c_JaffaCakes118

Files

06e69bfb6fffa17c4fc1e23af71b345c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

69d80fba910c07ce50468e01e460698a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
BackupSeek
CloseHandle
FindAtomA
GetCPInfo
GetCommandLineA
GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTickCount
GetVersion
GlobalLock
IsDebuggerPresent
LoadLibraryA
SearchPathA
SuspendThread
SwitchToFiber
SwitchToThread
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

gdi32

AddFontResourceA
CloseFigure
CreateBrushIndirect
DeleteObject
FillPath
GetDeviceCaps
GetNearestColor
SetBkColor
SetTextColor

advapi32

GetPrivateObjectSecurity
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
SetTokenInformation

user32

BeginPaint
ClientToScreen
ClipCursor
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
GetTopWindow
InvalidateRect
IsCharUpperA
LoadCursorA
MonitorFromRect
PostQuitMessage
SetCaretPos
ShowCaret
ShowCursor
TrackMouseEvent
TrackPopupMenuEx
UpdateWindow

Sections

.data
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69d80fba910c07ce50468e01e460698a

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

user32

Sections

.data Size: 82KB - Virtual size: 81KB

.data Size: 512B - Virtual size: 191B

.code Size: 2KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.data
Size: 82KB - Virtual size: 81KB

.data
Size: 512B - Virtual size: 191B

.code
Size: 2KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB