1967b153701d91f83890a1b0334dab07_JaffaCakes118

General

Target

1967b153701d91f83890a1b0334dab07_JaffaCakes118
Size

64KB
MD5

1967b153701d91f83890a1b0334dab07
SHA1

058481d5509339476fcbf9d5d4a585aa1e233d9c
SHA256

36ef7d4446956d59b2c80a33ab64e245b45e025f5a16c6d6661f4528aef86bae
SHA512

05ff4a74c9bb64498bb2234f764ef9bf64661df8b04bbc2c47e465dcff1dab9744e22e8b856060927676587ee8300426c427e175fa1149bf53bedb00fde5a7fd
SSDEEP

1536:ParSHCLlYDfaIa5e+u+vDFvKjnoQ26ee1Oph8i2C9d1BR:Pa4ag+Hm86p1O0hqdDR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1967b153701d91f83890a1b0334dab07_JaffaCakes118

Files

1967b153701d91f83890a1b0334dab07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d8523b6abbdafd654d09f25370133bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
GetLastError
GetFileAttributesExW
ResumeThread
CreateProcessW
GetModuleHandleW
GetProcAddress
SetLastError
FindFirstFileW
GetPrivateProfileStringW
InterlockedDecrement
CreateEventW
SetWaitableTimer
SuspendThread
GetCurrentProcess
WriteFile
CreateWaitableTimerW
FileTimeToSystemTime
CloseHandle
GlobalDeleteAtom
DeleteFileW
GlobalAlloc
SetCurrentDirectoryW
GetSystemTime
GlobalLock
VirtualFree
GetCurrentThreadId
GlobalFree
WideCharToMultiByte
LoadLibraryA
lstrcpyW
FindClose
MultiByteToWideChar

user32

SystemParametersInfoW
wsprintfW
GetDlgItem
CreatePopupMenu
PostThreadMessageW
DrawTextW
DialogBoxParamW
LoadImageW
GetClassNameW
GetSystemMetrics
PostQuitMessage
PostMessageW
GetMessageW
SendDlgItemMessageW
GetWindowTextW
SendMessageW
DefWindowProcW
EnableWindow
GetCursorPos
LoadStringW
IsWindow
GetWindowThreadProcessId

gdi32

CreateRoundRectRgn
CreateICW
GetClipBox
CreateBitmap
CreateCompatibleBitmap
GetMapMode
SetBkMode
SetMapMode
SelectObject
GetStockObject

advapi32

RegCreateKeyExW
GetUserNameW
SetSecurityDescriptorDacl
RegSetValueExW

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0d8523b6abbdafd654d09f25370133bd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB