42cb8142fbc9b7c76e45742eb848670a_JaffaCakes118

General

Target

42cb8142fbc9b7c76e45742eb848670a_JaffaCakes118
Size

38KB
MD5

42cb8142fbc9b7c76e45742eb848670a
SHA1

1e612a5996656bd81692679fa1e2a2cb5782dee4
SHA256

b91460d90a4716329edadd298c6c0e12ad6f92687fb5321f7b8e698fedb06639
SHA512

475ce521233ccff60cb9e22b93ee481582ddb32a8123cc1e364a883d9aa71e591435637bdc840b73367be5f2d713194d2b485aa8499c40130accb7c39228e5bd
SSDEEP

768:yDBjxRSvc6yMRk/FVs9hTVjtsQ9Q9mddG3gKDs/:ydjx8TyMRk/FyHpbSf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42cb8142fbc9b7c76e45742eb848670a_JaffaCakes118

Files

42cb8142fbc9b7c76e45742eb848670a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e0db25a329fae457d4ada03388e850c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CopyMetaFileA
BitBlt
AddFontResourceA
SetTextColor
CloseMetaFile
BeginPath
DeleteDC
ExcludeClipRect
GetPixel
GetPixel
ClearBrushAttributes
GetDCOrgEx
AddFontMemResourceEx
AbortPath
GetClipBox
AddFontResourceW
CloseFigure
CancelDC
GetBrushOrgEx
CreateSolidBrush
DeleteObject

kernel32

DeleteFileA
FindAtomA
FindFirstFileA
SetLastError
GetLastError
CopyFileExW
ReadConsoleA
CreateProcessA
GetConsoleMode
CopyFileExA
WriteFile
GetFileTime
GetComputerNameA
GetFileSize
CopyFileA
ReadFile
CopyFileW
GetCommandLineA
DeleteFileW
ExitThread
GetCPInfo

comctl32

ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragShowNolock
ImageList_Merge
ImageList_EndDrag
ImageList_GetImageRect
ImageList_Read
ImageList_GetImageInfo
ImageList_Remove
ImageList_LoadImageA
ImageList_DragMove
ImageList_GetIconSize
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_LoadImageW
ImageList_Draw

user32

DrawIconEx
GetWindowTextLengthA
GetDlgItem
InsertMenuA
DrawTextA
AlignRects
CreateIcon
CalcMenuBar
GetWindowTextA
AppendMenuA
GetFocus
LoadCursorA
BlockInput
CopyIcon
IsMenu
GetCursor
AppendMenuW
IsWindow

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 991B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e0db25a329fae457d4ada03388e850c

Headers

File Characteristics

Imports

gdi32

kernel32

comctl32

user32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 29KB - Virtual size: 251KB

.rsrc Size: 1024B - Virtual size: 991B

.reloc Size: - Virtual size: 36B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 29KB - Virtual size: 251KB

.rsrc
Size: 1024B - Virtual size: 991B

.reloc
Size: - Virtual size: 36B