3fd72cdd06aec7c9c4c6edaa1d63f733_JaffaCakes118

General

Target

3fd72cdd06aec7c9c4c6edaa1d63f733_JaffaCakes118
Size

504KB
MD5

3fd72cdd06aec7c9c4c6edaa1d63f733
SHA1

f3769ab286a3fe03f12789aa6a010952c959f2d3
SHA256

23eb8317bc8aa8064d2055fef2386035bb40daba52f2a0fad871593f23233919
SHA512

b195be568846a0601b567b53f45a41b07ea1be5bbb3a89042e270df127d82929a71d16b6b82bd5c2b97ab7c730eb9c2e145e2779229d0df29f6ea076efd0c48f
SSDEEP

12288:TcDZfhtdHuO8QumyxN6nuK4ACBA2UI1s3a:TcDZfhtdHuODGNhpR/b5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd72cdd06aec7c9c4c6edaa1d63f733_JaffaCakes118

Files

3fd72cdd06aec7c9c4c6edaa1d63f733_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da0e7550a8a350401812758a11a4ab10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetUserObjectSecurity
SetWindowLongA
DefFrameProcA
GetCursorPos
UnloadKeyboardLayout
UnhookWindowsHook
GetMenuState
ShowCursor
IsCharLowerW
EnumWindowStationsA
wsprintfA
MonitorFromWindow
InsertMenuA
DefFrameProcW
BringWindowToTop
GetInputState
IsCharLowerA
DrawTextExA
OpenDesktopA
SetMessageQueue
GetDCEx
GetWindowInfo
LoadKeyboardLayoutA
HiliteMenuItem
SetCaretBlinkTime
IsMenu
CloseDesktop
keybd_event
ChangeClipboardChain
DrawTextW
OpenWindowStationA
IsDialogMessageA

kernel32

QueryDosDeviceW
GetFileInformationByHandle
FormatMessageW
WritePrivateProfileStringA
GlobalReAlloc
SetNamedPipeHandleState
GetSystemTime
FindFirstFileExW
PurgeComm
FindCloseChangeNotification
GetStringTypeExW
TryEnterCriticalSection
SetFileAttributesA
RemoveDirectoryW
SetConsoleMode
GetFileAttributesExA
CreatePipe
GlobalGetAtomNameW
FreeEnvironmentStringsA
SetCommTimeouts
GetLogicalDriveStringsA
ReadConsoleA
FlushFileBuffers
ExitProcess
LocalFileTimeToFileTime
GetSystemDefaultLangID
VirtualProtect
GlobalFindAtomA
CreateIoCompletionPort

advapi32

GetFileSecurityA
RegEnumKeyW
CryptCreateHash
ChangeServiceConfigW
RegUnLoadKeyW
RegDeleteKeyW
RegEnumValueA
CryptVerifySignatureW

Sections

.text
Size: 1KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da0e7550a8a350401812758a11a4ab10

Headers

File Characteristics

Imports

user32

kernel32

advapi32

Sections

.text Size: 1KB - Virtual size: 217KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 262KB - Virtual size: 262KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 1KB - Virtual size: 217KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 262KB - Virtual size: 262KB

.rsrc
Size: 16KB - Virtual size: 16KB