1b4c414f75a57dd4fa6764ae62541585_JaffaCakes118

General

Target

1b4c414f75a57dd4fa6764ae62541585_JaffaCakes118
Size

68KB
MD5

1b4c414f75a57dd4fa6764ae62541585
SHA1

f140938bb503d3eb9e5124e5966d423a1de7059d
SHA256

b6d1b6d07128e473192577b2f071235a0a3b9148150efc41292d78a119da9500
SHA512

86919e027a055d6facd8d518467d90f4991531bf2e09e9bec41b274a9ef50f9c65b19d99d3861063b97018bce583f034d0015d89c3e7cddcc07d891c859335da
SSDEEP

1536:MZYUaeQ0OXAqrQ4yRECq/vopXrdlclY848:kBpQ1AqPFh3udsDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b4c414f75a57dd4fa6764ae62541585_JaffaCakes118

Files

1b4c414f75a57dd4fa6764ae62541585_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0db66d0bb5536cdaa29b11f94da08332

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
FileTimeToSystemTime
FindNextFileW
FindFirstChangeNotificationW
VirtualAlloc
FindFirstFileW
SuspendThread
Sleep
ReadFile
MultiByteToWideChar
GlobalAlloc
LoadLibraryW
GetFileAttributesW
CreateFileW
LoadLibraryA
MulDiv
GetProcAddress
FindResourceExW
GetLogicalDrives
SetEvent
FreeResource
SetFilePointer
CreateProcessW
GetCurrentProcessId
GetModuleHandleW
FindClose
SetLastError
GlobalAddAtomW
DuplicateHandle
InterlockedIncrement

user32

DestroyMenu
RegisterClassExW
GetDlgItem
CreateWindowExW
OffsetRect
GetKeyState
TranslateMessage
SetWindowPos
VkKeyScanW
SetWindowTextW
LoadImageW
SystemParametersInfoW
IsDlgButtonChecked
EnableWindow
SetCapture
FillRect
IsWindow

gdi32

CreateCompatibleBitmap
CreateBitmap
SetMapMode
GetMapMode
BitBlt
CreatePen
GetObjectW
CreateFontIndirectW
DeleteDC
DeleteObject
CreateCompatibleDC
SetBkColor
CreateRoundRectRgn
GetClipBox

advapi32

SetSecurityDescriptorDacl
RegCreateKeyExW
StartServiceW

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0db66d0bb5536cdaa29b11f94da08332

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB