3d0ff087ce46d7fbb321f8c27ae9f194_JaffaCakes118

General

Target

3d0ff087ce46d7fbb321f8c27ae9f194_JaffaCakes118
Size

34KB
MD5

3d0ff087ce46d7fbb321f8c27ae9f194
SHA1

0ae7b0da2c4b4a35d723614dcbe1776522ee6e8c
SHA256

1020fd2ecdb996b3358e66571014e0d8579eeb92cfe69144521391b25599396f
SHA512

222e719c2309d1bb31055438e9f68cb64fb12d6316e9f52f6f5410433e752107e45454377ca46030b2f6ff2e1f8138d510fbf9018981f7cdb60fdce537db1864
SSDEEP

384:h4OLdaSjSUCm3OU/CtysNk/33/JLLScfsOBh2uAx7yoN5:NL0S2vm3OUcyY4t5sshlAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d0ff087ce46d7fbb321f8c27ae9f194_JaffaCakes118

Files

3d0ff087ce46d7fbb321f8c27ae9f194_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2760affd018f48fb85ced2c01c390429

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
GetCommandLineA
GetCurrentThreadId
GetModuleHandleA
VirtualAlloc
FreeLibrary
ExitThread
GetSystemDefaultLangID
GetThreadPriority
GetDriveTypeA
GetStartupInfoA
IsValidCodePage
GetProcessTimes
GetCurrentProcessId
Sleep
CloseHandle
GetCurrentThread
GetModuleFileNameA
LoadLibraryA
GetCurrentProcess
TlsAlloc

user32

GetWindowTextLengthA
GetForegroundWindow
UpdateWindow
OpenIcon
GetClassLongA
GetDC
ReleaseDC
GetFocus
GetSystemMetrics
GetWindowLongA
IsWindowVisible
RegisterClassA
CreateWindowExA
GetWindowDC
BeginPaint
GetWindowTextA
GetActiveWindow
ShowWindow
GetWindow

advapi32

RegCloseKey
GetUserNameA
RegOpenKeyExA
IsTextUnicode
RegCreateKeyExA
RegQueryValueExA

version

VerLanguageNameA
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2760affd018f48fb85ced2c01c390429

Headers

File Characteristics

Imports

kernel32

user32

advapi32

version

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 76KB

.rsrc Size: 26KB - Virtual size: 26KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 76KB

.rsrc
Size: 26KB - Virtual size: 26KB