0e55e09567011cd910453bfbd6716d45_JaffaCakes118

General

Target

0e55e09567011cd910453bfbd6716d45_JaffaCakes118
Size

46KB
MD5

0e55e09567011cd910453bfbd6716d45
SHA1

7b675102fe1998b16b634d05f7917411964bf9fe
SHA256

7416638c5aed7a413fa6b519f27555bb1af91731ba710ea10b095d8d64575d2a
SHA512

970e699e8013a4bfb4528bd0ca711b393d359778ce6310ef88ab557b539ae3dac5620574624f9a13b13da2517153a56caba340c1a293081631990d95b3731664
SSDEEP

768:pigEBqOoMY9GLm6Aj2xwTxSLchjr83hwBN9ZbVA54p2MrRLW8nwEp0jrcDFy:kgXOo9TF0w5hbBNzBK4MMrRL9w+y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e55e09567011cd910453bfbd6716d45_JaffaCakes118

Files

0e55e09567011cd910453bfbd6716d45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d2bacd28edba744e341911610111ad7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageW
PeekMessageA
CharPrevA
SetForegroundWindow
GetFocus
DefWindowProcW
SetWindowLongW
DestroyWindow
EndPaint
ShowWindow
GetWindowLongW
GetDesktopWindow
SetWindowPos
DispatchMessageW
CharPrevExA
CharNextA
TranslateMessage
SetCursor
MessageBoxA
EnableWindow
GetDlgItemTextA
CharNextExA
PostMessageA
IsCharLowerA
SetWindowTextA
LoadCursorA
GetSysColor
RegisterClassExA
PeekMessageW
CreateWindowExA
SendMessageA
CreateWindowExW
SetWindowTextW

kernel32

GetFileAttributesA
GetSystemTime
lstrcatA
OutputDebugStringW
MulDiv
GetEnvironmentVariableW
GetModuleHandleA
lstrcpynW
CreateNamedPipeW
GetShortPathNameW
DeleteFileA
GetTimeFormatW
CancelTimerQueueTimer
GetVersion
OpenEventA
GetCurrentDirectoryA
CreateSemaphoreW
_lopen
CreatePipe
_llseek
Beep
Sleep

ntdll

ZwAllocateVirtualMemory
NtSetInformationThread
ZwOpenJobObject
RtlUnicodeToCustomCPN
RtlConvertSidToUnicodeString
RtlUpcaseUnicodeChar
ZwReleaseKeyedEvent
RtlImageRvaToSection
RtlEnableEarlyCriticalSectionEventCreation
RtlEnlargedIntegerMultiply

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d2bacd28edba744e341911610111ad7

Headers

File Characteristics

Imports

user32

kernel32

ntdll

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 17KB - Virtual size: 32KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 17KB - Virtual size: 32KB

.rsrc
Size: 6KB - Virtual size: 5KB