5ab5590d11693b176ec05390c247a842_JaffaCakes118

General

Target

5ab5590d11693b176ec05390c247a842_JaffaCakes118
Size

97KB
MD5

5ab5590d11693b176ec05390c247a842
SHA1

b3af6b9f3701f71d84ad2b2d4c6825e3a08892b2
SHA256

7a7e68f52a10631bd5266052c8a7ab65e1d746649089c6e88c53d9446da5b2ee
SHA512

9b412e367a6084a8cda32479d0173c48e6aab93df70f3715fc8d7455d451b2f441fa1378cdb34917f01ef1a5c1941457c606b12d453a4cd987a7b3c61e06a338
SSDEEP

3072:6vi33fREMiEbqilQRLwFpiYzVRhsiDWoSWU7uk1l:vVbqilmLkpi8LssSWUt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ab5590d11693b176ec05390c247a842_JaffaCakes118

Files

5ab5590d11693b176ec05390c247a842_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5689d26d20351e4a88dfa7d01d905c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
lstrcatA
Sleep
GetStdHandle
CloseHandle
HeapFree
GetCPInfo
SetLastError
lstrcpynA
HeapAlloc
GetFileType
lstrcpyA
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetLocalTime
GetFileSize

comctl32

ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_DragShowNolock
ImageList_Replace
ImageList_GetIcon
ImageList_DragEnter
ImageList_Create
ImageList_AddMasked
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_LoadImage
ImageList_Copy
ImageList_GetImageRect
ImageList_DrawEx
ImageList_Destroy
ImageList_LoadImageW
ImageList_Draw

advapi32

RegLoadKeyA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyExW
RegReplaceKeyA
RegQueryValueExA
RegEnumKeyA
RegDeleteValueA
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegDeleteValueW
RegCreateKeyW
RegLoadKeyW

user32

CalcMenuBar
DrawTextA
DialogBoxParamW
CloseWindow
DrawIconEx
DialogBoxParamA
GetWindowTextA
CopyRect
LoadCursorA
GetMenu
CopyIcon
GetCursor
IsWindow
DrawTextW
CreateIcon
GetDlgItem
AlignRects
GetDC

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ddata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.resr
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5689d26d20351e4a88dfa7d01d905c2

Headers

File Characteristics

Imports

kernel32

comctl32

advapi32

user32

Sections

.text Size: 9KB - Virtual size: 9KB

.ddata Size: 24KB - Virtual size: 24KB

.odata Size: 4KB - Virtual size: 12KB

.reloc Size: - Virtual size: 3KB

.resr Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.ddata
Size: 24KB - Virtual size: 24KB

.odata
Size: 4KB - Virtual size: 12KB

.reloc
Size: - Virtual size: 3KB

.resr
Size: 2KB - Virtual size: 1KB