2236fb47db1301bef7b26e6b423db9f2_JaffaCakes118

General

Target

2236fb47db1301bef7b26e6b423db9f2_JaffaCakes118
Size

226KB
MD5

2236fb47db1301bef7b26e6b423db9f2
SHA1

e94fa19b5009d8a2fde8d9f511e3fea2c3ac1c64
SHA256

5f962aad094b0a4d7a7682f7821d0809fbe6e2b5592dc353ea292ebd5945c261
SHA512

c9d2da48fb8aafdecb714946e4b05a0a511eef97f7f9c2d7a23f78addd5e3ebe524f7501640224a405533c38f94cc36c9e530e8eca440e152d14b1a9e42bfeda
SSDEEP

6144:7Vx5fhCjH103CoJJBvKGpTbXPt7Kex9DNSV:7V3fEjVWTBvVpPXAy9ZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2236fb47db1301bef7b26e6b423db9f2_JaffaCakes118

Files

2236fb47db1301bef7b26e6b423db9f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e28d9cc331ddd53b3606dc7d82aa07fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

EnumSystemLocalesW
ExitProcess
FindResourceExA
FreeLibraryAndExitThread
GetExitCodeThread
GetFileSize
GetLargestConsoleWindowSize
GetNumberFormatA
GetPrivateProfileSectionNamesW
GetProfileIntW
GlobalLock
HeapValidate
InitializeCriticalSection
InterlockedExchangeAdd
IsValidLocale
LeaveCriticalSection
LoadResource
OpenMutexW
SetCommConfig
SetMessageWaitingIndicator
SetSystemPowerState
SuspendThread
SwitchToFiber
TerminateProcess
TlsGetValue
TlsSetValue
Toolhelp32ReadProcessMemory
WaitForMultipleObjectsEx

user32

BlockInput
CharToOemBuffA
CloseDesktop
DdeQueryConvInfo
DispatchMessageA
DlgDirSelectExA
EnumDesktopsW
GetCursorPos
GetDesktopWindow
GetMenuInfo
IsCharAlphaNumericW
LoadCursorA
LoadCursorW
MoveWindow
OemKeyScan
RemovePropA
SendMessageW
SetCapture
SetMessageQueue
SetWindowsHookExA

gdi32

CreateBrushIndirect
CreateFontIndirectA
DeviceCapabilitiesExW
EnumEnhMetaFile
GdiSetBatchLimit
GetAspectRatioFilterEx
GetBrushOrgEx
GetCharWidth32A
GetGlyphOutlineA
GetGlyphOutlineW
GetLogColorSpaceW
GetMapMode
GetObjectType
GetOutlineTextMetricsW
IntersectClipRect
PolyBezierTo
ResetDCA
RoundRect
SetSystemPaletteUse
SetTextAlign
StartPage
StretchBlt

Sections

.text
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 223KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e28d9cc331ddd53b3606dc7d82aa07fa

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 512B - Virtual size: 12KB

.data Size: 223KB - Virtual size: 240KB

.rdata Size: - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 200KB

.text
Size: 512B - Virtual size: 12KB

.data
Size: 223KB - Virtual size: 240KB

.rdata
Size: - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 200KB