072f8b02d2d9df585cda469c8f821479_JaffaCakes118

General

Target

072f8b02d2d9df585cda469c8f821479_JaffaCakes118
Size

3.7MB
MD5

072f8b02d2d9df585cda469c8f821479
SHA1

966ace650f163d2468d229233a9725cd8f19856b
SHA256

e8f1a0b3b64c92a7fa423c04d333db1f5d51e98ae568fdce37c526283e34fe28
SHA512

0c147b18963fdb9af8a88edaed378463b85ecdfbd56c834d568ad10d4128deb526a8c3428016115844981163491f9231ffd20374bf7d832a88df7ba4541c93d4
SSDEEP

98304:RXQyt3aaiyvIZWRCToBy1/+WDCZcSUuOEUH:VqaSx/dDmcNR/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
072f8b02d2d9df585cda469c8f821479_JaffaCakes118

Files

072f8b02d2d9df585cda469c8f821479_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7bb63133a8ec8f7dded392a4011f322f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ValidateRect
SetWindowRgn
EnumDisplaySettingsExA
MonitorFromWindow
GetSysColorBrush
SwapMouseButton
SetDlgItemTextW
CreateMenu
CharToOemBuffA
GetDesktopWindow
GetWindowThreadProcessId
GrayStringA
LoadCursorFromFileW
GetScrollInfo
SetCaretBlinkTime
IsDialogMessageW
FillRect
GetActiveWindow
GetMenu
GetCapture
CharToOemA
SystemParametersInfoW
InsertMenuA
EnumDesktopWindows
GetWindowTextLengthW
ClipCursor
GetWindowPlacement
GetMenuInfo

kernel32

DeleteCriticalSection
SetConsoleActiveScreenBuffer
GetFullPathNameA
EnumCalendarInfoW
SetThreadLocale
FreeResource
SetConsoleTitleA
WritePrivateProfileStringW
LoadResource
ExitProcess
FlushFileBuffers
SetMailslotInfo
VirtualLock
CreateProcessA
GetOverlappedResult
DosDateTimeToFileTime
SizeofResource
GetProfileIntA
RemoveDirectoryA

advapi32

RegOpenKeyExW
AllocateLocallyUniqueId
EnumServicesStatusW
CryptGetUserKey
RegEnumValueW
BuildTrusteeWithNameW
RegReplaceKeyW
SetNamedSecurityInfoA
StartServiceW
MakeAbsoluteSD
AddAccessAllowedAce
RegDeleteValueW
EqualSid
RegDeleteValueA
RegOpenKeyW
CryptDestroyKey
SetEntriesInAclA
GetUserNameA

Sections

.text
Size: 4KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bb63133a8ec8f7dded392a4011f322f

Headers

File Characteristics

Imports

user32

kernel32

advapi32

Sections

.text Size: 4KB - Virtual size: 223KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 3.4MB - Virtual size: 3.4MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 4KB - Virtual size: 223KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 3.4MB - Virtual size: 3.4MB

.rsrc
Size: 19KB - Virtual size: 18KB