0f8c48a644893f21b9322bd20d1c5e28_JaffaCakes118

General

Target

0f8c48a644893f21b9322bd20d1c5e28_JaffaCakes118
Size

87KB
MD5

0f8c48a644893f21b9322bd20d1c5e28
SHA1

606c82668aa4755807309c747669b7d0f3add4db
SHA256

b57fac8bcebb7e52be3f86bd3e6b72e58e47c912021a30599c5a44a75533801a
SHA512

489a1f22fbc02584c8e5b4206ca523fde60fc69766adbe71719071ff8622db051f3281a6dfa70543cd0beda0f38dde3f668a24985a28f63c38c5e4d7a5de02ab
SSDEEP

1536:d9fKoir+YmPk4U018jYD1AYgwUOIaCTAKfgK:dF8r+YmPvU0Y01AYDDCqK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f8c48a644893f21b9322bd20d1c5e28_JaffaCakes118

Files

0f8c48a644893f21b9322bd20d1c5e28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

392e77cc031f5a73184e11ccdb1a7ef8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
lstrcpyA
GlobalAlloc
GetStringTypeA
lstrcmpA
lstrcmpiA
GetLocalTime
HeapAlloc
GlobalFree
lstrlenA
lstrcatA
GetModuleHandleA
GetLastError
GetFileSize
SetLastError
GetCommandLineA
GetFileAttributesA

user32

AppendMenuW
EndDialog
GetMenu
IsWindow
CopyRect
GetWindowTextA
DrawIcon
AlignRects
DialogBoxParamW
CloseWindow
CalcMenuBar
GetCursor
DrawTextW
GetFocus
CopyImage
InsertMenuA

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyA
RegQueryValueExW
RegQueryValueA
RegOpenKeyW
RegEnumKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueW
RegQueryInfoKeyA
RegDeleteValueW
RegQueryValueExA
RegLoadKeyW
RegFlushKey
RegQueryValueW

comctl32

ImageList_BeginDrag
ImageList_Draw
ImageList_DragLeave
ImageList_Create
ImageList_GetIconSize
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_Replace
ImageList_DragEnter
ImageList_Copy
ImageList_EndDrag
ImageList_AddIcon
ImageList_AddMasked
ImageList_GetImageRect

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 6KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

392e77cc031f5a73184e11ccdb1a7ef8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

Sections

.text Size: 14KB - Virtual size: 13KB

.wdata Size: 60KB - Virtual size: 60KB

.mdata Size: 6KB - Virtual size: 75KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 1024B - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 13KB

.wdata
Size: 60KB - Virtual size: 60KB

.mdata
Size: 6KB - Virtual size: 75KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 1024B - Virtual size: 1KB