173f626661dbe7e1c4a0f11a10ba662e_JaffaCakes118

General

Target

173f626661dbe7e1c4a0f11a10ba662e_JaffaCakes118
Size

10.0MB
MD5

173f626661dbe7e1c4a0f11a10ba662e
SHA1

fb3e40f78d9c39eb7754329e90a039a89f376aef
SHA256

354ef1b4f1c0b31418eaa9e62d4bac771bfbfff9a593f6f7a8bccb288de2b082
SHA512

65e8a8f42f0df51b9414daed99da8fe4885daee0c43eff8249596d4ad5b9541e30eac4199a988e984cf9ae12f03516a9c57b708f87e34324fa825482d3586bb6
SSDEEP

384:wm6UtSBtIUDHbmT2WbccccnbpX8rcy2qD59Jfm0jfU5T6qR6jje5WSyIWrGiNr:8tIUzbiv2Z9Jfm0DKT6SSe4tLNr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173f626661dbe7e1c4a0f11a10ba662e_JaffaCakes118

Files

173f626661dbe7e1c4a0f11a10ba662e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

62663cd947e6fa21652816da42ba2de8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetModuleFileNameA
GetLastError
CloseHandle
WriteFile
ExitProcess
Sleep
DeviceIoControl
lstrcatW
MultiByteToWideChar
GetCurrentProcess
CreateMutexA
LoadLibraryA
GetWindowsDirectoryA
GetProcAddress
GetTempPathA
CreateFileA
FreeLibrary

user32

GetWindowTextA
GetForegroundWindow
wsprintfA
IsWindow
MessageBoxA
keybd_event
FindWindowExA
UnregisterClassA
LoadCursorA
RegisterClassExA
PostMessageA

advapi32

LookupPrivilegeValueA
RegCloseKey
DeleteService

msvcrt

fscanf
fclose
strstr
_strlwr
printf
fopen

psapi

GetModuleFileNameExA

imm32

ImmUnlockIMC
ImmLockIMC

Exports

Exports

CandWndProc
CompWndProc
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mysechx
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62663cd947e6fa21652816da42ba2de8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

psapi

imm32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 18KB

mysechx Size: 1024B - Virtual size: 810B

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 1024B - Virtual size: 922B

.text
Size: 18KB - Virtual size: 18KB

mysechx
Size: 1024B - Virtual size: 810B

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 1024B - Virtual size: 922B