43ea9991da3d103c4b7b3fc47eb403c4_JaffaCakes118

General

Target

43ea9991da3d103c4b7b3fc47eb403c4_JaffaCakes118
Size

292KB
MD5

43ea9991da3d103c4b7b3fc47eb403c4
SHA1

430866b8bc24e51944866167d6ac19cd10ac3a54
SHA256

9296d844a9947067ac108e3ee95093a684fe5931685aae6cd90a2f47938787c9
SHA512

77e72079b3a92f447b15ab24d2cb4de9f50624c093a46c230ce00166f15f66c0f5ef1055f73cd9c4df8bdd41cd6b0115e7cb93cef88fa637cb0af02ef46594d0
SSDEEP

6144:BK9pkKjUsp/NPu0zcRxtZL0xkjSF4tDU6A9U5zjGuAqq/GXdgkt7:wzpn4NKR+H5OuAB/G37

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43ea9991da3d103c4b7b3fc47eb403c4_JaffaCakes118

Files

43ea9991da3d103c4b7b3fc47eb403c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b737bc5ff32e023eddad683664650547

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
ShowOwnedPopups
DeferWindowPos
IsWindowVisible
CloseWindow
GetWindowTextLengthA
GetDlgItemInt
IsWindowUnicode
EnumThreadWindows
GetSysColor
SetDlgItemTextA
SetWindowPos
GetWindowTextA

ole32

CoTaskMemRealloc
OleCreateEmbeddingHelper
CoLockObjectExternal
FreePropVariantArray
GetHGlobalFromILockBytes
CoIsOle1Class
CreateDataCache
OleQueryCreateFromData
OleSetMenuDescriptor
OleFlushClipboard
OleRegGetUserType
CoGetTreatAsClass
OleSetClipboard
OleNoteObjectVisible

kernel32

LocalHandle
GetModuleHandleA
SuspendThread
CloseHandle
SetEvent
ResumeThread
VirtualAlloc
GetExitCodeThread
OpenEventA
OpenMutexA
ReleaseMutex
ResetEvent
GetProcAddress
IsBadReadPtr
HeapFree
HeapLock
GetStringTypeW
GetSystemDefaultLangID
GetStartupInfoA
IsValidCodePage
IsBadCodePtr
GetSystemDefaultLCID
LocalFree
OpenSemaphoreA
VirtualFree

msvcrt

exit
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b737bc5ff32e023eddad683664650547

Headers

File Characteristics

Imports

user32

ole32

kernel32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 275KB - Virtual size: 383KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 275KB - Virtual size: 383KB

.rsrc
Size: 3KB - Virtual size: 2KB