4b790bbbe3d8973acab81d9f228f7d8e_JaffaCakes118

General

Target

4b790bbbe3d8973acab81d9f228f7d8e_JaffaCakes118
Size

93KB
MD5

4b790bbbe3d8973acab81d9f228f7d8e
SHA1

59db37bc7c457d8a80537e828cd29c1d9418bafb
SHA256

bf0b7d273ba4a868fe4374b88f173eb37aa51b38cfbfb9ce97c39a8b7e78a953
SHA512

174f89cebae8e4e1312a342a5a50f3d868849ec1613a470114c0b41aba8bc7b3c2ca5bf1ee6f753a4a90512f1ea981277b528539a6e2899d6726045f339985c8
SSDEEP

1536:za1aqWd6P6EGWvzsxZBkNeE1vjviB+qjtNFs:za1aqWd6P1nzAZusE1WHjZs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b790bbbe3d8973acab81d9f228f7d8e_JaffaCakes118

Files

4b790bbbe3d8973acab81d9f228f7d8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f8bc4e3f575c1113b6746acfbb79a55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_LoadImageA
ImageList_Create
ImageList_Remove
ImageList_DrawIndirect
ImageList_Copy
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_DragMove
ImageList_LoadImage
ImageList_Destroy
ImageList_LoadImageW
ImageList_Read
ImageList_Merge
ImageList_BeginDrag
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_DrawEx

kernel32

lstrcpyA
GetCPInfo
lstrlenA
HeapFree
Sleep
GetFileSize
GetLocalTime
GetFileAttributesA
GetStringTypeA
CloseHandle
GetLastError
GetModuleHandleA
DeleteFileA
GetDateFormatA
lstrcpynA
GetStdHandle

user32

CloseWindow
CreateIcon
AppendMenuA
IsMenu
DrawIconEx
DrawTextA
GetWindowTextA
AppendMenuW
EndDialog
CopyImage
IsWindow
GetDC
LoadCursorA
DrawTextW
DialogBoxParamA
GetMenu
InsertMenuA
DrawIcon

advapi32

RegCreateKeyExW
RegEnumKeyW
RegReplaceKeyA
RegLoadKeyA
RegOpenKeyExA
RegLoadKeyW
RegEnumValueW
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegQueryValueA
RegFlushKey
RegOpenKeyExW
RegCreateKeyW
RegEnumValueA
RegOpenKeyW

Sections

.CsMi
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gIltr
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kMcZR
Size: 7KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XbqHD
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f8bc4e3f575c1113b6746acfbb79a55

Headers

File Characteristics

Imports

comctl32

kernel32

user32

advapi32

Sections

.CsMi Size: 14KB - Virtual size: 14KB

.gIltr Size: 64KB - Virtual size: 64KB

.kMcZR Size: 7KB - Virtual size: 51KB

.XbqHD Size: 3KB - Virtual size: 3KB

.CsMi
Size: 14KB - Virtual size: 14KB

.gIltr
Size: 64KB - Virtual size: 64KB

.kMcZR
Size: 7KB - Virtual size: 51KB

.XbqHD
Size: 3KB - Virtual size: 3KB