2463239920e407f5e0944e9c162081c8_JaffaCakes118

General

Target

2463239920e407f5e0944e9c162081c8_JaffaCakes118
Size

116KB
MD5

2463239920e407f5e0944e9c162081c8
SHA1

0036d34a5fe0131a0d4623a6f2fa1ac614dfc103
SHA256

3bd70cc7dc5c501dd6c7fdc260bfaa941a63bb396575c549cf727a9fcc86765c
SHA512

10c540a3e2f8dbbf9f700165c81858767bab4eed1be2df2003971dc78073276ca00a0c9389eaf24535a72d24a1d9b7bc5be7ca4b5c329c9a18504cbbdfef993f
SSDEEP

1536:e8MFN7qNlfNe+zLipk+JOmuvBGVa/TYareDRRdauTZ8yEnm+Ad4gricMsV:Cb7q71LzLikOupGVgeDsuTZAo4lsV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2463239920e407f5e0944e9c162081c8_JaffaCakes118

Files

2463239920e407f5e0944e9c162081c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91e01d534d4bc84dd624c7d74c772681

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsDirectoryA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

gdi32

SetTextColor
GetDCOrgEx
CreateBitmap

user32

CreateIcon
SetWindowLongW
GetLastActivePopup
DestroyIcon
EnableWindow
GetDlgItem
GetSystemMenu
GetWindow
WaitMessage
SetParent
EnumChildWindows
GetFocus
DestroyWindow
CloseClipboard
UnregisterClassA
GetSysColorBrush
SetWindowLongA
CreatePopupMenu
EqualRect
DrawEdge
MessageBoxA
IsWindowVisible
GetDesktopWindow
GetActiveWindow
CharLowerBuffA
IsWindow
GetMenu
FrameRect
IsWindowEnabled

kernel32

GetModuleHandleA
SetHandleCount
ExitThread
GetProcessHeap
VirtualAlloc
ExitProcess
GetLastError
SetLastError
VirtualAllocEx
GetOEMCP
LocalAlloc
SetFilePointer
GetProcAddress
GetVersionExA
GlobalAlloc

advapi32

RegEnumKeyA
RegCreateKeyExA

comctl32

ImageList_Write

shell32

SHGetDesktopFolder
Shell_NotifyIconA
DragQueryFileA

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91e01d534d4bc84dd624c7d74c772681

Headers

File Characteristics

Imports

shlwapi

version

gdi32

user32

kernel32

advapi32

comctl32

shell32

Sections

CODE Size: 28KB - Virtual size: 28KB

BSS Size: 80KB - Virtual size: 80KB

.edata Size: 4KB - Virtual size: 3KB

.data Size: 1KB - Virtual size: 1KB

CODE
Size: 28KB - Virtual size: 28KB

BSS
Size: 80KB - Virtual size: 80KB

.edata
Size: 4KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 1KB