401e156cf69e880d24622c0f11804cd1_JaffaCakes118

General

Target

401e156cf69e880d24622c0f11804cd1_JaffaCakes118
Size

34KB
MD5

401e156cf69e880d24622c0f11804cd1
SHA1

677c9ba899dbdaa85f1ff226d180ad59173058dd
SHA256

bb2f000cea6ca18559b94eb6bbeeaac31098d5192952f2cf94f20280e62f1362
SHA512

eeb63596c29d3240cac23aa8f2df5364ca0227054b98c1ac4f5b96b53ad5bfa70fc70015f6a0404e2d3696652bfa90d7837217ca0412299c28406857cd50f7e0
SSDEEP

768:Qi/mut077KW2uOZaHLgm0DuwJoWNLeDigkJL:9t0vKmOZwLuDuwJoWdegL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
401e156cf69e880d24622c0f11804cd1_JaffaCakes118

Files

401e156cf69e880d24622c0f11804cd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49dc713939f3e441c6f92d353a05b0f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
ChildWindowFromPoint
GetWindowDC
GetMessageA
LoadIconA
GetDlgCtrlID
SendMessageTimeoutA
EnumWindows
DispatchMessageA
OpenClipboard
TranslateAcceleratorA
ModifyMenuA
FindWindowA
GetWindowTextA

msvcrt

_wctime
wcsncmp
fprintf
__getmainargs
__p__fmode
_wfopen
strrchr
_wtoi
strlen
_isctype
qsort
_except_handler3
time

kernel32

OpenProcess
Sleep
GetFileType
lstrcpyA
TerminateProcess
SearchPathA
HeapReAlloc
SetThreadAffinityMask
DeleteCriticalSection
WaitForMultipleObjects
CreateEventA
SetEndOfFile
WriteConsoleA
GetFileTime
GetLastError
GetACP
GetSystemDirectoryA
FreeEnvironmentStringsW
SetFilePointer

gdi32

SetBkMode
CreateSolidBrush
SelectClipRgn
DeleteObject
BitBlt
MoveToEx
CreatePen
Polyline
CreateFontIndirectA
CreateCompatibleDC
SetROP2
SetMapMode
SaveDC
CreateDIBSection

ole32

CoUnmarshalHresult
CoGetObject
OleQueryCreateFromData
OleLockRunning
CoRegisterSurrogate
OleCreateFromFileEx
OleTranslateAccelerator
CoDisconnectObject
CoIsHandlerConnected
OleGetClipboard
OleSetAutoConvert
OleCreateLinkFromData

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49dc713939f3e441c6f92d353a05b0f5

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

gdi32

ole32

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 4KB - Virtual size: 76KB

.rsrc Size: 1024B - Virtual size: 968B

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 4KB - Virtual size: 76KB

.rsrc
Size: 1024B - Virtual size: 968B