42217e8cad4ea4449d6ad8176e9e62c3_JaffaCakes118

General

Target

42217e8cad4ea4449d6ad8176e9e62c3_JaffaCakes118
Size

84KB
MD5

42217e8cad4ea4449d6ad8176e9e62c3
SHA1

66da1ab15b44f78eebbff2dbdfde501e322d4edf
SHA256

21554973e721e5279d7bea8465a312b689570e198439bcae7e47302e83002204
SHA512

e3cb6bf851da44da8021ab3419c41d9c9427214cfb6e95b4b3fd062e213d3846fa8f08e4847a16d13177cd654fe85ded2f1b29d884a3ac4e69ad2a1fb8154c49
SSDEEP

1536:0tw28Pc3Wdz6NrKqzy3ulB3gFufn7aFk73IRejTL0TFd1/o:H2oc3LcqsqBMKWtATwHNo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42217e8cad4ea4449d6ad8176e9e62c3_JaffaCakes118

Files

42217e8cad4ea4449d6ad8176e9e62c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0a7a80747795279a583a6dce14622ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegQueryValueA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegDeleteKeyA
RegQueryInfoKeyW
RegGetKeySecurity
RegEnumValueA
RegReplaceKeyW
RegOpenKeyExA
RegFlushKey
RegEnumKeyA
RegQueryValueExW
RegCreateKeyExA
RegOpenKeyExW

kernel32

GetStdHandle
CopyFileA
OpenFile
GetCommandLineA
CopyFileW
CopyFileExW
CopyFileExA
ExitThread
SetLastError
CreateDirectoryA
ReadConsoleA
CreateProcessA
OpenFileMappingA
FindFirstFileA
GetFileTime
GlobalFree
GetLastError
DeleteFileA
DeleteAtom

comctl32

ImageList_EndDrag
ImageList_AddMasked
ImageList_Replace
ImageList_Create
ImageList_Copy
ImageList_AddIcon
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_GetIconSize
ImageList_Draw
ImageList_GetIcon
ImageList_Destroy
ImageList_LoadImageW
ImageList_LoadImage
ImageList_GetImageCount
ImageList_Merge
ImageList_LoadImageA
ImageList_DragEnter
ImageList_Remove
ImageList_BeginDrag

user32

LoadCursorA
LoadMenuA
DrawIconEx
IsWindow
DialogBoxParamA
CopyIcon
CloseWindow
DialogBoxParamW
GetDlgItem
GetDC
BlockInput
GetWindowTextLengthA
CalcMenuBar
DrawTextA
CopyRect
InsertMenuA
AppendMenuW
GetFocus
CopyImage

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0a7a80747795279a583a6dce14622ad

Headers

File Characteristics

Imports

advapi32

kernel32

comctl32

user32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 64KB - Virtual size: 131KB

.reloc Size: - Virtual size: 20B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 64KB - Virtual size: 131KB

.reloc
Size: - Virtual size: 20B

.rsrc
Size: 4KB - Virtual size: 1KB