36f78db2b7053612a6ea5ab46a35e274_JaffaCakes118

General

Target

36f78db2b7053612a6ea5ab46a35e274_JaffaCakes118
Size

331KB
MD5

36f78db2b7053612a6ea5ab46a35e274
SHA1

ce81b34f6fb09d3b6a1b43e35ac378d4674d0054
SHA256

1259195ba568558a25326c1ea553fc805d122e7f9d29e4b8c76c498f80def008
SHA512

60091b8f5aa4b4f90f4f17aed5feb9662fa4f02e60aa1d6796cce4d5c7fc4521fab0e011c8edb9f5a5bb03c5575e313ea1fbca02e051ec5312e836948cd26ce4
SSDEEP

6144:ACQnruabjCvcxKQ2OGZJ49L7G2igx4SZ6IiKXft8cpNs:3N8CvcEOGZJ49L7G2iM6I7Fjs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36f78db2b7053612a6ea5ab46a35e274_JaffaCakes118

Files

36f78db2b7053612a6ea5ab46a35e274_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c7a49dd1e304319e708764302c53486b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetSysColors
ChildWindowFromPointEx
EnumThreadWindows
SendDlgItemMessageA
OpenIcon
CreateDialogIndirectParamA
AdjustWindowRectEx
SetWindowPos
FindWindowA
GetWindowPlacement

ole32

CreateClassMoniker
OleGetAutoConvert
CoTaskMemFree
OleSetAutoConvert
CoGetPSClsid
CLSIDFromString
MkParseDisplayName
CoAddRefServerProcess
CoRegisterClassObject
StgOpenPropStg
OleQueryLinkFromData
OleCreateStaticFromData
OleGetClipboard

kernel32

VirtualLock
GetModuleHandleA
VirtualAlloc
ReleaseSemaphore
CreateSemaphoreA
OpenSemaphoreA
GetProcAddress
VirtualUnlock
GetOverlappedResult
GlobalSize
GlobalAlloc
GetACP
GetStartupInfoA
GetOEMCP
GetTimeFormatA
LocalUnlock
HeapCreate
IsValidCodePage

msvcrt

__getmainargs
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
_XcptFilter
_exit

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7a49dd1e304319e708764302c53486b

Headers

File Characteristics

Imports

user32

ole32

kernel32

msvcrt

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 314KB - Virtual size: 314KB

.data Size: 512B - Virtual size: 92KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 314KB - Virtual size: 314KB

.data
Size: 512B - Virtual size: 92KB

.rsrc
Size: 2KB - Virtual size: 2KB