3a3950427895f36cde7822756d52fa52_JaffaCakes118

General

Target

3a3950427895f36cde7822756d52fa52_JaffaCakes118
Size

84KB
MD5

3a3950427895f36cde7822756d52fa52
SHA1

f456e9c4a72993c130f984d9e0a7381978a761a6
SHA256

d0954d95aa8d7448750af6d747db1e1b7b7913386be9db03b7f55629abea231a
SHA512

9d9e1f1b5c135ee4aacb0e0864810fc0f47eaef73a0de531ba05259779a126859df7437bea79ede6cb494c63e054cb35c2ca91f5c3f01f69d77690cdeac0d96f
SSDEEP

1536:0tw28Pc3Wdz6NrKqzy3ulB3gFufn7aFk73IRejTL0TFd1/E:H2oc3LcqsqBMKWtATwHNE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a3950427895f36cde7822756d52fa52_JaffaCakes118

Files

3a3950427895f36cde7822756d52fa52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0a7a80747795279a583a6dce14622ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegQueryValueA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegDeleteKeyA
RegQueryInfoKeyW
RegGetKeySecurity
RegEnumValueA
RegReplaceKeyW
RegOpenKeyExA
RegFlushKey
RegEnumKeyA
RegQueryValueExW
RegCreateKeyExA
RegOpenKeyExW

kernel32

GetStdHandle
CopyFileA
OpenFile
GetCommandLineA
CopyFileW
CopyFileExW
CopyFileExA
ExitThread
SetLastError
CreateDirectoryA
ReadConsoleA
CreateProcessA
OpenFileMappingA
FindFirstFileA
GetFileTime
GlobalFree
GetLastError
DeleteFileA
DeleteAtom

comctl32

ImageList_EndDrag
ImageList_AddMasked
ImageList_Replace
ImageList_Create
ImageList_Copy
ImageList_AddIcon
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_GetIconSize
ImageList_Draw
ImageList_GetIcon
ImageList_Destroy
ImageList_LoadImageW
ImageList_LoadImage
ImageList_GetImageCount
ImageList_Merge
ImageList_LoadImageA
ImageList_DragEnter
ImageList_Remove
ImageList_BeginDrag

user32

LoadCursorA
LoadMenuA
DrawIconEx
IsWindow
DialogBoxParamA
CopyIcon
CloseWindow
DialogBoxParamW
GetDlgItem
GetDC
BlockInput
GetWindowTextLengthA
CalcMenuBar
DrawTextA
CopyRect
InsertMenuA
AppendMenuW
GetFocus
CopyImage

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0a7a80747795279a583a6dce14622ad

Headers

File Characteristics

Imports

advapi32

kernel32

comctl32

user32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 64KB - Virtual size: 131KB

.reloc Size: - Virtual size: 20B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 64KB - Virtual size: 131KB

.reloc
Size: - Virtual size: 20B

.rsrc
Size: 4KB - Virtual size: 1KB