5b6949c9f8b6d62974ed81b69a056274_JaffaCakes118

General

Target

5b6949c9f8b6d62974ed81b69a056274_JaffaCakes118
Size

88KB
MD5

5b6949c9f8b6d62974ed81b69a056274
SHA1

5a3fca476348d6dfd1ec8dee31b34ac4bf00594d
SHA256

573f502bca5ff5945274764eeeb50e68245d5fc5d2bf1c487a0eb57daaa060a3
SHA512

ea86f27e89f0319d554de62f971e4756ee66b30c66bfd8a6c38b1e0ddcca36d89f82487e994ced59c51f257f4ce43d1314b876f658b27ba1a18e19f4e736a1e3
SSDEEP

1536:bd9rdvdlqeRFqcoWHWnYCyjQ0O4n9yhZN4DrRshHAHTMYtJqFvgioNrQewpVt:jd2RcjaYZjQZ4n9yz+pshHAwYtEFvYNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b6949c9f8b6d62974ed81b69a056274_JaffaCakes118

Files

5b6949c9f8b6d62974ed81b69a056274_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fba4ddcb248a65db63666555a1c9dbb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ChooseColorA
ChooseColorW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
dwOKSubclass
WantArrows
GetOpenFileNameA
GetOpenFileNameW
LoadAlterBitmap
PrintDlgA
ReplaceTextW

user32

DialogBoxParamA
EnumWindows
GetDesktopWindow
GetUserObjectSecurity
ScreenToClient
SendMessageA

kernel32

HeapCreate
GetDevicePowerState
GetCommandLineA
GetACP
ExpandEnvironmentStringsA
ExitProcess
EnumSystemLocalesW
EnumLanguageGroupLocalesW
CreateWaitableTimerW
CloseHandle
CallNamedPipeW
GetModuleHandleA
SetSystemPowerState
SetComputerNameA
RtlMoveMemory
LCMapStringA
GetStartupInfoA
HeapAlloc
GetVersionExA
GetLogicalDrives

ole32

StringFromGUID2
CoCreateInstance
CLSIDFromString

dbghelp

FindDebugInfoFileEx
ImageNtHeader
ImageRvaToVa
MapDebugInformation
SymEnumSourceFiles
SymFromAddr
SymGetLineFromAddr64
SymGetLinePrev64
SymGetSymFromAddr
SymGetSymPrev
SymGetTypeFromName
SymMatchString
SymSetOptions
UnmapDebugInformation
ImageDirectoryEntryToData

comctl32

CreateStatusWindowA
DestroyPropertySheetPage
DrawInsert
FlatSB_SetScrollInfo
ImageList_DrawEx
ImageList_GetBkColor
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_Merge
ImageList_SetFilter
UninitializeFlatSB

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fba4ddcb248a65db63666555a1c9dbb

Headers

File Characteristics

Imports

comdlg32

user32

kernel32

ole32

dbghelp

comctl32

Sections

.text Size: 48KB - Virtual size: 47KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 48KB - Virtual size: 47KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB