174e6855a59f575d4e475b18a99b4257_JaffaCakes118

General

Target

174e6855a59f575d4e475b18a99b4257_JaffaCakes118
Size

90KB
MD5

174e6855a59f575d4e475b18a99b4257
SHA1

ab61d3a825fa1854f06e7b508843ec5d7d3b2f5e
SHA256

c81e9dd2ad3759d39cc42ee1f03b5dad0d32d64c6fbec73e3a4428630ddf858e
SHA512

1d03caa8b79bce3676a0b84cabb2d215934054dc96b9b929cc9397e3d2aaf999987df7a670ad8639ce32026f80efbb415e836b2f191ec4b7889c4bbfbb0a7f69
SSDEEP

1536:A+627UQulbLoB+842wzENyuNf8yyI2l8+VAuHz6AW/MEiP7PxlahKzZoQ:pLulbLS+89wgNEy88BuTBg9iP90hKzG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
174e6855a59f575d4e475b18a99b4257_JaffaCakes118

Files

174e6855a59f575d4e475b18a99b4257_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eabd5386f7e35acfbe652d9e5c0e292a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetTickCount
GetThreadContext
CreateProcessA
GetTimeFormatA
Sleep
CreateThread
ExitProcess
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetEnvironmentVariableA
GetModuleFileNameA
GetProcAddress
MoveFileExA
GetModuleHandleA
GetStartupInfoA

user32

SetWindowPos
EnableMenuItem
GetMenu
GetWindowPlacement
LoadIconA
LoadCursorA
RegisterClassExA
LoadAcceleratorsA
PeekMessageA
TranslateAcceleratorA
TranslateMessage
SetWindowTextA
MessageBoxA
DefWindowProcA
BeginPaint
EndPaint
PostMessageA
DialogBoxParamA
ReleaseDC
DestroyWindow
CreateWindowExA
LoadMenuA
GetDC
GetWindowDC
ShowWindow
GetDlgItem
EndDialog
SetDlgItemTextA
DispatchMessageA

gdi32

StretchDIBits
GetStockObject

shell32

DragQueryFileA
ShellExecuteA
DragFinish

shlwapi

AssocQueryStringA

msvcrt

memcpy
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
memmove
getenv
??2@YAPAXI@Z
atoi
_except_handler3
strlen
fopen
fread
fseek
rewind
pow
malloc
fclose
free
memset
_ftol
strrchr
strcpy
strcat
sprintf
_controlfp

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eabd5386f7e35acfbe652d9e5c0e292a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

shlwapi

msvcrt

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 76KB - Virtual size: 76KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 76KB - Virtual size: 76KB