1ab0a1aff01f4a209f8b96ddd7daba56_JaffaCakes118

General

Target

1ab0a1aff01f4a209f8b96ddd7daba56_JaffaCakes118
Size

316KB
MD5

1ab0a1aff01f4a209f8b96ddd7daba56
SHA1

437bb22c873cc21a21898c71ccd68b13658f0b22
SHA256

21d3c5ed312fc44a876f7b260fe63bd20fbe1aa76da50d07acb9498700a5be65
SHA512

ba58e3ef675448ae417afe40ea25781349453846d855ba627a6ad41e4783827861f7d01b04f72420aa398aab3a7715e497bda50402c2f47dae7e511ccfdba706
SSDEEP

6144:M25TNi9c6ucZwMDhRJXD2u20/7AZQdsOS/zf2os/u+:jM9cuSIXJX6U/7AZQY/Tt3+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ab0a1aff01f4a209f8b96ddd7daba56_JaffaCakes118

Files

1ab0a1aff01f4a209f8b96ddd7daba56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2db10372a129d90621aae4b352c294c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord2
ord17
ord6
InitCommonControlsEx
ord5

kernel32

FreeLibrary
CloseHandle
Module32Next
Module32First
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
VirtualProtect
VirtualAlloc
VirtualFree
UnmapViewOfFile

user32

GetNextDlgTabItem
GetNextDlgGroupItem
SetWindowPos
MapDialogRect
CreateDialogIndirectParamA
MessageBoxIndirectA
DefDlgProcA
SetDlgItemTextA
SendDlgItemMessageA
DlgDirListA
DlgDirSelectExA
MessageBoxA
SetFocus
GetWindowTextA
GetListBoxInfo
SendMessageA

msvcrt

strcmp
memmove
_c_exit
_exit
_XcptFilter
_cexit
exit
__winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2db10372a129d90621aae4b352c294c

Headers

File Characteristics

Imports

comctl32

kernel32

user32

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 168B

.udata Size: - Virtual size: 48KB

.rdata Size: 76KB - Virtual size: 76KB

.reloc Size: 512B - Virtual size: 200B

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 168B

.udata
Size: - Virtual size: 48KB

.rdata
Size: 76KB - Virtual size: 76KB

.reloc
Size: 512B - Virtual size: 200B