079ee221ac846d1f04df5f82c7f9614f_JaffaCakes118

General

Target

079ee221ac846d1f04df5f82c7f9614f_JaffaCakes118
Size

34KB
MD5

079ee221ac846d1f04df5f82c7f9614f
SHA1

d84450717cf8f5dd97248a9b2ecf9255f1c22353
SHA256

dcdfa74e2e22cb21750084c2902af6cd56f9962201b861acaf877c7a1ddb70fe
SHA512

c16a746b25966f27036b25265f36fe20e67497785b24f105f4a089b5e72d4d7cc7f32806ff0d69ab0a9dd8ddfc08daa57b3200f142078baf6d2cb3f1db3a4502
SSDEEP

768:iW/SR7B08mIRPbJNMYZOpixhc831laLeDigkJL:oBXmINbQpixhc831lCegL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
079ee221ac846d1f04df5f82c7f9614f_JaffaCakes118

Files

079ee221ac846d1f04df5f82c7f9614f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49dc713939f3e441c6f92d353a05b0f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
ChildWindowFromPoint
GetWindowDC
GetMessageA
LoadIconA
GetDlgCtrlID
SendMessageTimeoutA
EnumWindows
DispatchMessageA
OpenClipboard
TranslateAcceleratorA
ModifyMenuA
FindWindowA
GetWindowTextA

msvcrt

_wctime
wcsncmp
fprintf
__getmainargs
__p__fmode
_wfopen
strrchr
_wtoi
strlen
_isctype
qsort
_except_handler3
time

kernel32

OpenProcess
Sleep
GetFileType
lstrcpyA
TerminateProcess
SearchPathA
HeapReAlloc
SetThreadAffinityMask
DeleteCriticalSection
WaitForMultipleObjects
CreateEventA
SetEndOfFile
WriteConsoleA
GetFileTime
GetLastError
GetACP
GetSystemDirectoryA
FreeEnvironmentStringsW
SetFilePointer

gdi32

SetBkMode
CreateSolidBrush
SelectClipRgn
DeleteObject
BitBlt
MoveToEx
CreatePen
Polyline
CreateFontIndirectA
CreateCompatibleDC
SetROP2
SetMapMode
SaveDC
CreateDIBSection

ole32

CoUnmarshalHresult
CoGetObject
OleQueryCreateFromData
OleLockRunning
CoRegisterSurrogate
OleCreateFromFileEx
OleTranslateAccelerator
CoDisconnectObject
CoIsHandlerConnected
OleGetClipboard
OleSetAutoConvert
OleCreateLinkFromData

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49dc713939f3e441c6f92d353a05b0f5

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

gdi32

ole32

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 4KB - Virtual size: 76KB

.rsrc Size: 1024B - Virtual size: 968B

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 4KB - Virtual size: 76KB

.rsrc
Size: 1024B - Virtual size: 968B