2b82eae53f37ac70eb05951b98c6e00c_JaffaCakes118

General

Target

2b82eae53f37ac70eb05951b98c6e00c_JaffaCakes118
Size

120KB
MD5

2b82eae53f37ac70eb05951b98c6e00c
SHA1

53bc7cc3ea590949b796c5a42a2da2bc500373c9
SHA256

15c070d725b153694db93204450f85463c507da4b3ec23e2217b69a97fbfe818
SHA512

9e15dcf7190f3b9c256427843227633bfe24286288144fc4beb0978ca9ac8faddf16b53360938685c6376a775dd352918950dd8213e1c23001151613a36a256c
SSDEEP

3072:ypRqzG0tXdvIKi9Ty6MliwUXprj5JO6Cgzx0SQbn7kBpS5Dbfi:ypR98XdgK+TyZiwa353zaZnkBpS5Dbq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b82eae53f37ac70eb05951b98c6e00c_JaffaCakes118

Files

2b82eae53f37ac70eb05951b98c6e00c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9cc1319c44afdeceb90c7f57e273ec69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandle
ProcessIdToSessionId
OpenFileMappingA
IsBadReadPtr
HeapAlloc
GetConsoleInputExeNameA
CloseConsoleHandle
UpdateResourceA
SetConsoleCursor
OpenSemaphoreA
OpenJobObjectA
GetCommandLineA
WriteConsoleInputA
IsDebuggerPresent
SetFirmwareEnvironmentVariableA
IsValidLanguageGroup
VirtualAllocEx
CancelWaitableTimer
_llseek
GetLongPathNameW
UnlockFile
CreateFileMappingW

user32

SetSysColors
IsWindowVisible
CopyRect
DlgDirSelectComboBoxExA
GetWindow
SetMenuContextHelpId
GetTopWindow
GetRawInputDeviceInfoA
GetClipboardFormatNameA
SetForegroundWindow
LockWorkStation
ReplyMessage
CascadeChildWindows
SendMessageCallbackA
TileWindows
EnumChildWindows
ReplyMessage
SendMessageCallbackA
GetCursor
PostQuitMessage
CopyIcon
GetWindowLongA
OpenClipboard
EnumClipboardFormats
QuerySendMessage
SendIMEMessageExA
GetMessagePos
CreateAcceleratorTableA
CopyAcceleratorTableA
GetTabbedTextExtentA
CopyIcon
GetCursorInfo
DrawCaptionTempA
GetRegisteredRawInputDevices
EndDeferWindowPos
SetCursor

comdlg32

GetOpenFileNameA

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cc1319c44afdeceb90c7f57e273ec69

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

Sections

.text Size: 82KB - Virtual size: 81KB

.data Size: 2KB - Virtual size: 154KB

.rsrc Size: 47KB - Virtual size: 47KB

.text
Size: 82KB - Virtual size: 81KB

.data
Size: 2KB - Virtual size: 154KB

.rsrc
Size: 47KB - Virtual size: 47KB