4d77acf297d999eea4850fdcc23f9366_JaffaCakes118

General

Target

4d77acf297d999eea4850fdcc23f9366_JaffaCakes118
Size

88KB
MD5

4d77acf297d999eea4850fdcc23f9366
SHA1

648d2403f206517960f1ab86bea1ac9edb295634
SHA256

27ca6f9af4b7469d36ba1bbc93697db9f01aa8e2377c2d1038eac0eef3a55ef3
SHA512

e8f5197bd9d6dd6b569e6263ae8a3c5a50bb62ad310cd9a1f26bd95a985f577b0c78861e0b53ff3ede485801004f00a5b020fbba68e9f2c0bd8800cf701835de
SSDEEP

1536:W0+HC30VQdbILh0P8p4i8KuX8KCcTohQ8eAg:W0InQdc3VKCQopet

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d77acf297d999eea4850fdcc23f9366_JaffaCakes118

Files

4d77acf297d999eea4850fdcc23f9366_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d903ea19f500cb01da2587cbcadf0e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetStringTypeW
Sleep
lstrcpynA
GetCommandLineA
GetStringTypeA
CloseHandle
lstrlenA
GetLastError
GetCPInfo
SetLastError
HeapAlloc
GetFileAttributesA
WideCharToMultiByte
lstrcpyA
GlobalAlloc
GetStdHandle
GetModuleHandleA
GetDateFormatA
GetModuleFileNameA

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegReplaceKeyW
RegReplaceKeyA
RegCreateKeyExA
RegQueryInfoKeyA
RegOpenKeyW
RegLoadKeyW
RegFlushKey
RegQueryValueA
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExW
RegQueryValueExW
RegQueryValueW

comctl32

ImageList_Destroy
ImageList_DragMove
ImageList_EndDrag
ImageList_AddIcon
ImageList_GetIconSize
ImageList_Copy
ImageList_DragEnter
ImageList_LoadImage
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_GetImageRect
ImageList_Create
ImageList_DragShowNolock
ImageList_Remove
InitCommonControls

user32

GetFocus
LoadCursorA
GetDlgItem
GetWindowTextLengthA
DrawTextW
DrawIcon
CopyIcon
CreateIcon
InsertMenuA
CloseWindow
CopyImage
AppendMenuA
DialogBoxParamA
IsMenu
DrawTextA
LoadMenuA
DialogBoxParamW
AppendMenuW

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 502B

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d903ea19f500cb01da2587cbcadf0e2

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

user32

Sections

.text Size: 10KB - Virtual size: 9KB

.ydata Size: 25KB - Virtual size: 24KB

.hdata Size: 3KB - Virtual size: 6KB

.idata Size: 1024B - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 502B

.text
Size: 10KB - Virtual size: 9KB

.ydata
Size: 25KB - Virtual size: 24KB

.hdata
Size: 3KB - Virtual size: 6KB

.idata
Size: 1024B - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 502B