155cdcb217c1db7527e023c4006f064b_JaffaCakes118

General

Target

155cdcb217c1db7527e023c4006f064b_JaffaCakes118
Size

789KB
MD5

155cdcb217c1db7527e023c4006f064b
SHA1

9511decdc72645c088a850b01197357136538a86
SHA256

9c7ee2b340c22cd738dc465f4867fdda791238f01da4deb7eec7f173bb20e95b
SHA512

af006a510317093a668c8925ffd5d2b00ed0360cf9412069ae1649f11350db5512695bd3b2858497cb160f6dff16a24b5369776c2e7ceea898fa3fc1cd413a7b
SSDEEP

12288:Hj5N1BrJLBOXBehADvZnWfMhK45e6aTfohj4UNjD5Sq+YW3v2YyppqJxo:HlN1JYBeiDvZucNvhj4kD5JQ2YUpC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155cdcb217c1db7527e023c4006f064b_JaffaCakes118

Files

155cdcb217c1db7527e023c4006f064b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fe7652b022db48f2cb5fdf5e45f69f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

FindResourceA
GetNumberFormatW
GetPriorityClass
GetConsoleAliasExesLengthW
CreateFileMappingA
FindNextChangeNotification
DnsHostnameToComputerNameA
CreateConsoleScreenBuffer
MoveFileA
OpenJobObjectW
GetCPInfoExW
GetProcessVersion
GetNumberOfConsoleMouseButtons
CreatePipe
GetTickCount
SetConsoleKeyShortcuts

user32

VkKeyScanExW
TranslateMessageEx
AlignRects
GetWindowWord
GetWindowTextLengthW
TranslateMessageEx
LoadBitmapA
ShowScrollBar
VkKeyScanExW
PeekMessageA
SwitchDesktop

shell32

SHGetIconOverlayIndexW
WOWShellExecute
SHGetPathFromIDListA
SHBrowseForFolderW
DuplicateIcon
SHGetDiskFreeSpaceExA

gdi32

GetICMProfileW
PaintRgn
GdiConvertToDevmodeW
GetClipBox
CreateBitmap
FontIsLinked
FlattenPath
GetColorSpace
PolylineTo
SetMetaRgn
GetStretchBltMode
CreateBitmap
GdiIsMetaFileDC
OffsetClipRgn
GdiEntry8
AddFontResourceA
EqualRgn

Sections

.text
Size: 9KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 752KB - Virtual size: 752KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6fe7652b022db48f2cb5fdf5e45f69f0

Headers

File Characteristics

Imports

kernel32

user32

shell32

gdi32

Sections

.text Size: 9KB - Virtual size: 1.8MB

DATA Size: 752KB - Virtual size: 752KB

.rsrc Size: 23KB - Virtual size: 24KB

.idata Size: 2KB - Virtual size: 1KB

.pack32 Size: - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 1.8MB

DATA
Size: 752KB - Virtual size: 752KB

.rsrc
Size: 23KB - Virtual size: 24KB

.idata
Size: 2KB - Virtual size: 1KB

.pack32
Size: - Virtual size: 4KB