478466bf03ff44d3871473fa9e9e1655_JaffaCakes118

General

Target

478466bf03ff44d3871473fa9e9e1655_JaffaCakes118
Size

81KB
MD5

478466bf03ff44d3871473fa9e9e1655
SHA1

9bf0b3d452052e98dc451560a870ea1f2e5377ec
SHA256

0196a6d4501c2c8fe3a07628018b85477a9f6e3cffaf53f0861964c86f866146
SHA512

66a179fd6e3b7f8b1fa8168f2c1a6768fecd97237988893780a0f865b0a65cb086f71d77f4784e50f453176d12f82970fd9a52299b116b328ad31ccc53ce8e50
SSDEEP

1536:o8+TbOA3QD5kyaTdilg7lJVnY7zaqk0Ys7in9NZLC9h0OqwRwrGCJCTzyOWS:z+TsWAgZXnY7O9rA0Omr6WS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
478466bf03ff44d3871473fa9e9e1655_JaffaCakes118

Files

478466bf03ff44d3871473fa9e9e1655_JaffaCakes118
.exe windows:1 windows x86 arch:x86

6978aead662adfa332c9808f6d2c3ddc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
exit
__getmainargs
_except_handler3
memcpy
_acmdln
__p__commode
_controlfp
_adjust_fdiv
_exit
_XcptFilter
_initterm
__setusermatherr
__p__fmode

gdi32

DeleteObject
CreateCompatibleDC
BitBlt
DeleteDC
SetBkColor
Polyline

kernel32

GetModuleHandleA
GetModuleFileNameA
SetErrorMode
VirtualProtect
GetStartupInfoA
HeapCreate
GetCurrentProcessId
HeapAlloc

user32

SetMenuItemInfoA
LoadIconA
TrackPopupMenu
EnumChildWindows
SendMessageTimeoutA
PeekMessageA
DrawFrameControl
DialogBoxIndirectParamA
DrawTextA
EndDialog
ScreenToClient
ChildWindowFromPoint
TranslateAcceleratorA
GetWindow
DefMDIChildProcA
BeginDeferWindowPos
GetActiveWindow
BeginPaint
CopyRect
GetSystemMetrics
IntersectRect
PtInRect
DialogBoxParamA
LoadImageA
MoveWindow
RegisterWindowMessageA
CallWindowProcA
GetSysColor
SetPropA
CheckDlgButton
GetWindowTextA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6978aead662adfa332c9808f6d2c3ddc

Headers

File Characteristics

Imports

msvcrt

gdi32

kernel32

user32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 50KB - Virtual size: 76KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 50KB - Virtual size: 76KB

.rsrc
Size: 11KB - Virtual size: 11KB