0933c96c4e9c5c4a9298acbaaddc6d3f_JaffaCakes118

General

Target

0933c96c4e9c5c4a9298acbaaddc6d3f_JaffaCakes118
Size

432KB
MD5

0933c96c4e9c5c4a9298acbaaddc6d3f
SHA1

1253fad2c755626e954bd398d3802df37b503678
SHA256

e3122f71163d19f4f9e294092247028447f683b533b55346e12b93b3bd7c6308
SHA512

79b1c26d890434f62c3d72430bc1f96aa8f5cf884cc8c6488a146e8e576eb3ff84c57beb557b72a0c6a694415fbe19f7beb082eed14f7031413d640a0d4a21a5
SSDEEP

12288:5B+nCa/B83ANeSjCE8kFjtSHSTYz9Vx2NdxYt:nyxBCA0SL8kabz4jxY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0933c96c4e9c5c4a9298acbaaddc6d3f_JaffaCakes118

Files

0933c96c4e9c5c4a9298acbaaddc6d3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95bf70a969bbf0d7c20388bb2378874f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumThreadWindows
CloseWindow
IsDialogMessageA
IsZoomed
SetSysColors
ArrangeIconicWindows
FindWindowExA
GetForegroundWindow
MessageBoxIndirectA
EndDialog
GetWindow
GetClientRect
SetWindowTextA
GetDlgItemInt

ole32

CLSIDFromProgID

oleaut32

LHashValOfNameSysA

gdi32

BitBlt
Chord
CopyEnhMetaFileW
AddFontResourceA
CreateDiscardableBitmap
CloseEnhMetaFile
Arc
CancelDC
CreateDCW
CloseMetaFile
ChoosePixelFormat
CreateCompatibleBitmap

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyA
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegOpenKeyA
RegRestoreKeyA
RegSetValueExA
RegEnumValueA
RegQueryValueExA
RegSaveKeyA
RegUnLoadKeyA

kernel32

GetStartupInfoA
VirtualAlloc
GetStdHandle
GetProcAddress
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
GetModuleHandleA
WriteProfileSectionA

msvcrt

_exit
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95bf70a969bbf0d7c20388bb2378874f

Headers

File Characteristics

Imports

user32

ole32

oleaut32

gdi32

advapi32

kernel32

msvcrt

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 129KB - Virtual size: 129KB

.data Size: 276KB - Virtual size: 357KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 129KB - Virtual size: 129KB

.data
Size: 276KB - Virtual size: 357KB

.rsrc
Size: 6KB - Virtual size: 5KB