3cdaac4e3988c850d3aca792d0ef242e_JaffaCakes118

General

Target

3cdaac4e3988c850d3aca792d0ef242e_JaffaCakes118
Size

84KB
MD5

3cdaac4e3988c850d3aca792d0ef242e
SHA1

86808c5ebb2b5a4cdaffd1f1c5eff3a58eab27dc
SHA256

be21cf16d8cafab54c3af1a91fb81ceefe93b8b68b0a829ea1ac53b152724ac2
SHA512

653c3a760acdc5a3591a4edf893b69c02a7d7c7c0a10cd0e9193978278e33c7d12bf540d8685701e4ab344a4d1ff6414b1ea9e175b985657920cb2c5b4690818
SSDEEP

1536:0tw28Pc3Wdz6NrKqzy3ulB3gFufn7aFk73IRejTL0TFd1/o:H2oc3LcqsqBMKWtATwHNo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cdaac4e3988c850d3aca792d0ef242e_JaffaCakes118

Files

3cdaac4e3988c850d3aca792d0ef242e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0a7a80747795279a583a6dce14622ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegQueryValueA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegDeleteKeyA
RegQueryInfoKeyW
RegGetKeySecurity
RegEnumValueA
RegReplaceKeyW
RegOpenKeyExA
RegFlushKey
RegEnumKeyA
RegQueryValueExW
RegCreateKeyExA
RegOpenKeyExW

kernel32

GetStdHandle
CopyFileA
OpenFile
GetCommandLineA
CopyFileW
CopyFileExW
CopyFileExA
ExitThread
SetLastError
CreateDirectoryA
ReadConsoleA
CreateProcessA
OpenFileMappingA
FindFirstFileA
GetFileTime
GlobalFree
GetLastError
DeleteFileA
DeleteAtom

comctl32

ImageList_EndDrag
ImageList_AddMasked
ImageList_Replace
ImageList_Create
ImageList_Copy
ImageList_AddIcon
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_GetIconSize
ImageList_Draw
ImageList_GetIcon
ImageList_Destroy
ImageList_LoadImageW
ImageList_LoadImage
ImageList_GetImageCount
ImageList_Merge
ImageList_LoadImageA
ImageList_DragEnter
ImageList_Remove
ImageList_BeginDrag

user32

LoadCursorA
LoadMenuA
DrawIconEx
IsWindow
DialogBoxParamA
CopyIcon
CloseWindow
DialogBoxParamW
GetDlgItem
GetDC
BlockInput
GetWindowTextLengthA
CalcMenuBar
DrawTextA
CopyRect
InsertMenuA
AppendMenuW
GetFocus
CopyImage

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0a7a80747795279a583a6dce14622ad

Headers

File Characteristics

Imports

advapi32

kernel32

comctl32

user32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 64KB - Virtual size: 131KB

.reloc Size: - Virtual size: 20B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 64KB - Virtual size: 131KB

.reloc
Size: - Virtual size: 20B

.rsrc
Size: 4KB - Virtual size: 1KB