40a8789810c2a0c4a9846b43194af2f8_JaffaCakes118

General

Target

40a8789810c2a0c4a9846b43194af2f8_JaffaCakes118
Size

474KB
MD5

40a8789810c2a0c4a9846b43194af2f8
SHA1

7e6e1325f0038eff0103ee619c665ee01a434e6e
SHA256

0e4ca1a07245ed025a8ab5a259a9146d272d256086dd1bfb1091dfbbaa00791c
SHA512

546f21b0adc5c2a14d69e58a10ff174e20fa73321f480718d73c43f9989e8fe7d5b5421b0112c5627716c0494f1b757619d0ebb96ce0776e05f843ec07d10e5f
SSDEEP

6144:C3lQ3hpJv93cPneMe/pARza6D/8qRvi/j2jBGKut5IaNgm1rSn:a0pv93cPneMe/GRzDD8AiLuMZmaNg4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40a8789810c2a0c4a9846b43194af2f8_JaffaCakes118

Files

40a8789810c2a0c4a9846b43194af2f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d7f60ad1ea53d67076cce131ab6f87f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsFree
CreatePipe
GetOEMCP
GetShortPathNameA
GetLargestConsoleWindowSize
AddAtomA
IsDBCSLeadByte
CancelWaitableTimer
GetModuleHandleA
VirtualAlloc
GetConsoleCP
ReleaseMutex
GetThreadPriority
GetExitCodeThread
GetThreadTimes
CompareStringA
CreateMutexA
GetUserDefaultLangID
TlsGetValue
GetThreadLocale
SetEvent

user32

GetActiveWindow
GetDC
IsIconic
InvalidateRect
ValidateRect
CloseWindow
GetClassInfoExA
ReleaseDC
ShowWindow
GetFocus
GetClassNameA
RegisterClassA
GetWindowTextA
GetWindow
IsWindowVisible
GetWindowTextLengthA
GetForegroundWindow
GetSystemMetrics
ReleaseDC

dsound

DllGetClassObject
DllCanUnloadNow
GetDeviceID
DirectSoundEnumerateA
DirectSoundCreate

mscms

CheckColors

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 33B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d7f60ad1ea53d67076cce131ab6f87f

Headers

File Characteristics

Imports

kernel32

user32

dsound

mscms

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 33B

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 33B

.rsrc
Size: 4KB - Virtual size: 4KB