219c0bbaafc5f42400d368b6e8994367_JaffaCakes118

General

Target

219c0bbaafc5f42400d368b6e8994367_JaffaCakes118
Size

52KB
MD5

219c0bbaafc5f42400d368b6e8994367
SHA1

c69b66309d739ba531edbf53cb222c7962baf6cf
SHA256

1aa01d6711ffbedf4332fb7372dc930fcc34df75aaea3a0008a0385c80f5de95
SHA512

6f27995dbabbb2305a245db3d6cbebf13c02cc5c976fa91e81bc05575e928c5181faa65da79aae4e85fba7f9aca25f6ee0291cdc9a2154ca9d3e6d97865d886e
SSDEEP

1536:dpEWPkei/c7fwJXDGW+Z6/QqwS0umUdsIu0dSnrf+:dpEwker7faD4w/QnS6msJ0Af

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
219c0bbaafc5f42400d368b6e8994367_JaffaCakes118

Files

219c0bbaafc5f42400d368b6e8994367_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfd375a8a7d996850b729612480f27fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowPos
SetTimer
ModifyMenuA
GetWindowTextA
GetMenuItemCount
DefFrameProcA
CreateIconIndirect

kernel32

LoadLibraryA
lstrcpynA
WaitForSingleObject
UnmapViewOfFile
TerminateThread
SetLastError
RtlUnwind
CloseHandle
ExitProcess
FormatMessageA
GetCommandLineA
GetEnvironmentStringsW
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessAffinityMask
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLCID
GetVersionExA
GlobalAddAtomA
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
IsBadStringPtrA
IsDebuggerPresent
MultiByteToWideChar
LocalAlloc

setupapi

SetupTermDefaultQueueCallback
SetupDiDestroyClassImageList

olepro32

OleLoadPicture

oleacc

GetRoleTextA
CreateStdAccessibleProxyA
GetStateTextW
LresultFromObject
AccessibleObjectFromPoint

advapi32

ConvertSidToStringSidA
CryptVerifySignatureA
LsaAddAccountRights
ReadEncryptedFileRaw
AccessCheckByTypeAndAuditAlarmA

security

ImportSecurityContextA
QueryContextAttributesW

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfd375a8a7d996850b729612480f27fe

Headers

File Characteristics

Imports

user32

kernel32

setupapi

olepro32

oleacc

advapi32

security

Sections

.text Size: 40KB - Virtual size: 44KB

.data Size: 9KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 44KB

.data
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB