4080b842498deeffc7c9096b96b92bbf_JaffaCakes118

General

Target

4080b842498deeffc7c9096b96b92bbf_JaffaCakes118
Size

207KB
MD5

4080b842498deeffc7c9096b96b92bbf
SHA1

6f11acce9b1efc7afddbd4a49063bb9862b8cba8
SHA256

39d3a9aca0d8e579ffc82dec3f9068c96606e219834c2de41bdded4f1f49cc23
SHA512

b1c2e89a8d68c68269353a1b5349ff4deeca014ff800f7ccc476c62febafe2427eb22875b6e620b375aec14b71b397e0295264f7d124709a76dba33e57a0bfb8
SSDEEP

6144:RyjExotRmmpRUylhdBEIZxAvX5ALtluGtC:Ryj9t0g2ylHZOxalQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4080b842498deeffc7c9096b96b92bbf_JaffaCakes118

Files

4080b842498deeffc7c9096b96b92bbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fad091c1de598430839e8549c5a06002

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

rpcrt4

RpcBindingSetAuthInfoA
RpcStringBindingComposeA
NdrClientCall
RpcBindingFromStringBindingA
RpcStringFreeA

user32

SetScrollRange
EmptyClipboard
CallNextHookEx
ToAscii
UnhookWindowsHookEx
RealGetWindowClass
GetSysColorBrush
SetWindowPos
RegisterClassW
ChildWindowFromPoint
SetClipboardData
IsClipboardFormatAvailable
SetWindowsHookExW
ClipCursor
DefWindowProcW
WinHelpW
DestroyCursor
DestroyIcon
DrawEdge
GetSysColor

comctl32

ImageList_Add
ImageList_Create
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy

kernel32

CreateFiber
GetFileAttributesA
SearchPathW
FindResourceExA
FlushFileBuffers
LockFile
TerminateProcess
GetVolumeInformationW
GetFileTime
CompareStringW
IsDBCSLeadByte
FileTimeToLocalFileTime
UnlockFile
EnumResourceNamesA
FileTimeToSystemTime
GetVersionExW
FlushFileBuffers
GetUserDefaultLangID
LocalAlloc
GetFileType
GetSystemTime
VerLanguageNameW
GetProfileStringW
SetEndOfFile
GetSystemDirectoryW

comdlg32

GetFileTitleA

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fad091c1de598430839e8549c5a06002

Headers

File Characteristics

Imports

rpcrt4

user32

comctl32

kernel32

comdlg32

Sections

.text Size: 187KB - Virtual size: 187KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 16KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 92KB

.text
Size: 187KB - Virtual size: 187KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 16KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 92KB