334b73cbdc4960d96731c40db3c407c8_JaffaCakes118

General

Target

334b73cbdc4960d96731c40db3c407c8_JaffaCakes118
Size

396KB
MD5

334b73cbdc4960d96731c40db3c407c8
SHA1

1faa1bce0ce0368f94b8442c2cb83af1f2ef33ca
SHA256

36e7a4ee7f7179aefc58bf1c9245fb4bd9e3b56d799c3e01fb1007ca7a3f9e0d
SHA512

559d88f7564c55fd71a4c6a48ddcdd796bb8271b268ac701746b82dd35bfa6c37d74c1922c2dc235472de44bd294b76bb39db19b2e125e713ac2ed5da75d721e
SSDEEP

12288:j2yCjsWnzHutX+QZombKoCiCkJtVwavJqOWs6gy:CsWLVmWoRfwG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
334b73cbdc4960d96731c40db3c407c8_JaffaCakes118

Files

334b73cbdc4960d96731c40db3c407c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec280dd0f40042334b6a3825b5292e63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFileEx
GetFileType
WaitForSingleObjectEx
UnmapViewOfFile
QueryPerformanceCounter
CloseHandle
HeapAlloc
LoadLibraryA
GetCurrentThread
ExitProcess
ReleaseSemaphore
GetLogicalDrives
TlsAlloc
FlushViewOfFile
InterlockedExchange
GetTickCount
FindNextFileA
GetModuleHandleA
SetConsoleCtrlHandler
DosDateTimeToFileTime
RtlUnwind
TerminateProcess
GetModuleFileNameA
HeapReAlloc
GetTimeZoneInformation
GetCurrentThreadId
VirtualAlloc
GetPrivateProfileIntA
GetProcAddress
ReadConsoleA
GetCurrentProcess
HeapFree
GlobalReAlloc
GlobalFindAtomA
GetModuleHandleW
GetCurrentProcessId
VirtualQuery
GetVolumeInformationW
CreateToolhelp32Snapshot
GetSystemTimeAsFileTime
AllocConsole

gdi32

GetMetaRgn
CreatePenIndirect
CancelDC
SelectClipPath
DeleteEnhMetaFile
SetColorSpace
ResetDCA
GetStockObject
GetBitmapBits
Ellipse
CreateEllipticRgnIndirect
RemoveFontResourceA
SetWindowExtEx
BeginPath
AngleArc
PolyTextOutA
GetKerningPairsA
StretchBlt
PolyTextOutW
GetMapMode
GetGlyphOutlineA
StrokeAndFillPath

advapi32

InitializeSecurityDescriptor
CryptGenRandom
RegEnumKeyExA
RegNotifyChangeKeyValue
RegConnectRegistryW
CryptDuplicateKey
LookupAccountNameW

user32

CharUpperBuffA
ReuseDDElParam
DrawTextA
CharToOemW
DdeQueryConvInfo
GetClipboardFormatNameA

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec280dd0f40042334b6a3825b5292e63

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

user32

Sections

.text Size: 122KB - Virtual size: 122KB

.data Size: 264KB - Virtual size: 264KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 122KB - Virtual size: 122KB

.data
Size: 264KB - Virtual size: 264KB

.rsrc
Size: 8KB - Virtual size: 8KB