3d8756ae6da6b1dbf4c99ffefcfb143e_JaffaCakes118

General

Target

3d8756ae6da6b1dbf4c99ffefcfb143e_JaffaCakes118
Size

211KB
MD5

3d8756ae6da6b1dbf4c99ffefcfb143e
SHA1

7b205584ce5afb425fbc10c5267bacf509246c43
SHA256

ef1caafc3b0d3752cf5ce479d83ed3c4d8f23fbe8207200fb9bb9a9ba52b9e95
SHA512

80dcad7fe3a12f15877831211be6546b5d2044a36e6ecd8c1e71749fd3e169bdde82a8e78b97f03d6dbc250f9cc193498409a3bb0ade734f8858fe469b8fc7a1
SSDEEP

3072:sxlaI8+pKB+wdFINCo3vh3SSYKy9WgwzQ2dYEwfU5VIsSa4m2cG2sPnXe6E:sx2Yh3vHYKy0LQ3fU5VIsSLp2Enm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d8756ae6da6b1dbf4c99ffefcfb143e_JaffaCakes118

Files

3d8756ae6da6b1dbf4c99ffefcfb143e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f793dfad7b63f1760b93b9f6dddacbea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateHalftonePalette
CreateHatchBrush
CreateICW
CreatePatternBrush
EndDoc
EnumFontFamiliesExW
EnumFontsA
ExtFloodFill
FrameRgn
GetCharacterPlacementA
GetEnhMetaFilePaletteEntries
GetMetaFileBitsEx
GetNearestColor
GetObjectA
GetPaletteEntries
GetRegionData
LineDDA
LineTo
PlayMetaFile
PolyBezierTo
Polygon
PtInRegion
SetMapperFlags
SetPixel
SetTextColor
SetWindowOrgEx
StartPage
StrokePath

kernel32

CloseHandle
CreateProcessA
CreateProcessW
DeleteFileA
FileTimeToSystemTime
FindClose
GetCurrentThreadId
GetEnvironmentVariableA
GetExitCodeProcess
GetFileSize
GetFileTime
GetSystemInfo
GetSystemTime
GetTempPathA
GetTickCount
GetWindowsDirectoryA
GlobalAddAtomA
GlobalFindAtomA
InitializeCriticalSection
LeaveCriticalSection
LocalFree
MapViewOfFile
SetLastError
TerminateThread
TlsAlloc
UnhandledExceptionFilter

user32

BeginPaint
CallWindowProcA
CharNextA
CheckMenuItem
DefWindowProcA
DeleteMenu
EmptyClipboard
EnumWindows
GetDCEx
GetKeyboardType
GetMenuStringA
GetScrollPos
GetSubMenu
GetWindowPlacement
GetWindowTextA
IsIconic
LoadStringA
RemoveMenu
SendMessageA
SetCapture
SetWindowLongA
SetWindowPlacement
ShowCursor
TranslateMessage

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

smAGOEaH
Size: 1024B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f793dfad7b63f1760b93b9f6dddacbea

Headers

File Characteristics

Imports

gdi32

kernel32

user32

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 99KB - Virtual size: 99KB

.rsrc Size: 18KB - Virtual size: 17KB

smAGOEaH Size: 1024B - Virtual size: 120KB

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 99KB - Virtual size: 99KB

.rsrc
Size: 18KB - Virtual size: 17KB

smAGOEaH
Size: 1024B - Virtual size: 120KB