1b4578bd0bde84ab88075bf1f7c84708_JaffaCakes118

General

Target

1b4578bd0bde84ab88075bf1f7c84708_JaffaCakes118
Size

52KB
MD5

1b4578bd0bde84ab88075bf1f7c84708
SHA1

57072cad704ed95c66e5e2cd0f5586f4c0f457a2
SHA256

c325aadee31ff55d78c14fb6b892760cf2371e38d949b2bf148d5f32f37196f5
SHA512

b3152244f838b7e80e1bdf625c67035e13a2bf954773c8c09bdf81606d8997c5f0cc72c3470bc49c5e597f0db10b7e697e04fbb181b67dc9e346a8b1fa931ac0
SSDEEP

1536:s1H5D6cMVKYaBBxD7rr91rDOgNPhZy8dLc:s1H5D6lMBBxD/HDZNhdY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b4578bd0bde84ab88075bf1f7c84708_JaffaCakes118

Files

1b4578bd0bde84ab88075bf1f7c84708_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe17d25f4e4d501b0ab1576ebe413a6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynW
WriteFile
GetStartupInfoA
GetStringTypeW
GetOEMCP
GetACP
GetStdHandle
LCMapStringW
GetCurrentProcess
GetStringTypeA
TerminateProcess
LCMapStringA
lstrcpyA
SetHandleCount
lstrcpynA
GetModuleFileNameA
lstrcatA
SetFilePointer
GetCommandLineA
CreateFileA
GetVersion
MultiByteToWideChar
GetFileType
GetCPInfo

user32

InsertMenuA
IsMenu
DrawIconEx
GetWindowTextLengthA
DrawIcon
DrawTextA
CopyIcon
GetDlgItem
CopyImage
EndDialog
GetMenu
GetWindowTextA
DrawTextW
GetCursor
DialogBoxParamW
LoadCursorA
GetDC
CloseWindow
DialogBoxParamA
CreateIcon
IsWindow
CopyRect

comctl32

ImageList_Destroy
CreateMappedBitmap
CreateToolbarEx
DrawStatusText
ImageList_GetIcon
ImageList_Copy
ImageList_GetIconSize
DrawStatusTextW
ImageList_DragEnter
ImageList_Add
ImageList_LoadImageW

advapi32

RegOpenKeyA
RegQueryValueA
RegQueryValueExW
RegOpenKeyExA
RegEnumKeyW
RegEnumValueW
RegCreateKeyExW
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyW
RegEnumValueA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 17.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe17d25f4e4d501b0ab1576ebe413a6c

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 41KB - Virtual size: 17.6MB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 41KB - Virtual size: 17.6MB