380943b404790bd5f0010cbaf5c096ee_JaffaCakes118

General

Target

380943b404790bd5f0010cbaf5c096ee_JaffaCakes118
Size

389KB
MD5

380943b404790bd5f0010cbaf5c096ee
SHA1

aa9c80db3d4391f84ef08db3a67a90359b5b18b0
SHA256

dbc2fce1b048a75e48b372017b1bc117094ad44f568fb7e3b8185622e3641fd8
SHA512

6d2816019624326b95a67671564ff82919f560bd70fe97b46e51d42ec7516aa3043618e5cfd7fbb97799af31384c934c8ca9b92c838950ea2e5a4708dafdca25
SSDEEP

12288:Xu/zyBLvjDLgWKNnzD4+6yAcyPrummIa8UdS20uYia:Ez6Lf8WKZXqZPDJpaDdv0xi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
380943b404790bd5f0010cbaf5c096ee_JaffaCakes118

Files

380943b404790bd5f0010cbaf5c096ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d07402225ad027657eec14cee23dfb2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatW
WriteConsoleInputW
GetThreadLocale
ConnectNamedPipe
QueryPerformanceCounter
SetConsoleOutputCP
HeapAlloc
LoadLibraryA
FillConsoleOutputAttribute
ExitProcess
EnumSystemLocalesA
GetPrivateProfileStringW
GetProcessHeaps
SetComputerNameW
InterlockedExchange
GetTickCount
GetDiskFreeSpaceW
GetModuleHandleA
FreeResource
SetConsoleMode
RtlUnwind
GetShortPathNameW
GetModuleFileNameA
HeapReAlloc
LockResource
GetCurrentThreadId
VirtualAlloc
WritePrivateProfileStructA
GetProcAddress
GetTempPathA
GetCurrentProcess
HeapFree
GetVersion
MoveFileExA
GetPrivateProfileSectionA
ReadFile
VirtualQuery
OpenFile
OpenMutexA
GetSystemTimeAsFileTime
FileTimeToDosDateTime
GetCurrentProcessId
lstrcmp
TerminateProcess

wininet

UpdateUrlCacheContentPath
InternetConnectA
FindFirstUrlCacheContainerA
FtpCreateDirectoryW
InternetConfirmZoneCrossingA
InternetOpenW
CreateUrlCacheEntryA
InternetGetConnectedStateExW
InternetCombineUrlW
InternetAlgIdToStringA
FtpCommandA

gdi32

GetCharWidthW
GetPixelFormat
GetBitmapBits

comdlg32

GetFileTitleA
GetOpenFileNameA
PrintDlgW
FindTextW
ChooseFontA
GetSaveFileNameA
GetOpenFileNameW
ReplaceTextW
PageSetupDlgA
ChooseFontW
PrintDlgA
PageSetupDlgW
GetSaveFileNameW
FindTextA

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d07402225ad027657eec14cee23dfb2f

Headers

File Characteristics

Imports

kernel32

wininet

gdi32

comdlg32

Sections

.text Size: 118KB - Virtual size: 117KB

.data Size: 264KB - Virtual size: 263KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 118KB - Virtual size: 117KB

.data
Size: 264KB - Virtual size: 263KB

.rsrc
Size: 6KB - Virtual size: 5KB