42c9225318e5c4596a3408b38cc4991d_JaffaCakes118

General

Target

42c9225318e5c4596a3408b38cc4991d_JaffaCakes118
Size

3.7MB
MD5

42c9225318e5c4596a3408b38cc4991d
SHA1

598926db5d470ddb9f121fe02ff891dbbed2e51e
SHA256

766a30466a64465891e12b1e472496f6c851e8850d0ca44177abcce0a398cf6e
SHA512

62380faa2d21606a66ff9f0b246d1cbf13a0ac21741dd9de2e9a9f82a8fc6575867c5825176bfef09aa598760e88672129a975af8152a8c190fa13468da341bd
SSDEEP

98304:jvXduljY1KcO8Go4ekgymUZgNbV+wIOPfA+zXVJsT/gmxbD+0K:LD1AQ4FaUyNB/XJKgMbs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42c9225318e5c4596a3408b38cc4991d_JaffaCakes118

Files

42c9225318e5c4596a3408b38cc4991d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfe73124486bdb3b9a70911d99e1e572

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameA
GlobalFindAtomA
CreateMutexA
FreeEnvironmentStringsA
OpenMutexA
GetTickCount
GetFileAttributesExA
UnhandledExceptionFilter
PeekConsoleInputW
WritePrivateProfileSectionA
LocalSize
GetSystemInfo
MoveFileW
GenerateConsoleCtrlEvent
SetEvent
GlobalFree
GetPrivateProfileSectionW
SetConsoleOutputCP
EnumSystemCodePagesW
ReadConsoleOutputA
DebugBreak
CreateMutexW
PrepareTape
GetACP
ExitProcess

comdlg32

GetOpenFileNameW
ReplaceTextA

user32

ModifyMenuW
SetLastErrorEx
BroadcastSystemMessageW
WaitMessage
GetMenuItemRect
DrawTextA
FrameRect
ScrollDC
PostMessageW
RegisterWindowMessageW
OpenWindowStationA
ShowCursor
MonitorFromWindow
SetDlgItemTextW
DrawIconEx
GetMessagePos
DialogBoxParamA
GetCaretBlinkTime
SendMessageCallbackW
ChangeDisplaySettingsW
LoadMenuA
GetDoubleClickTime
IsWindowUnicode
ValidateRect
GetTabbedTextExtentW
CopyAcceleratorTableA
TranslateAcceleratorW
SetCapture

comctl32

CreatePropertySheetPageA
ImageList_GetBkColor

msvcrt

_snprintf
ftell
_wremove
_isatty
_mbschr
fgetwc
_wsystem
_wpopen
fopen
_wfopen
_splitpath
_wcsnicmp
_ui64tow
_ismbcdigit
_wsopen
_mbsrchr
iswprint
srand
fgetc
_beginthread
_mbsstr

Sections

.text
Size: 12KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfe73124486bdb3b9a70911d99e1e572

Headers

File Characteristics

Imports

kernel32

comdlg32

user32

comctl32

msvcrt

Sections

.text Size: 12KB - Virtual size: 231KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3.5MB - Virtual size: 3.5MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 12KB - Virtual size: 231KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3.5MB - Virtual size: 3.5MB

.rsrc
Size: 19KB - Virtual size: 18KB