5c7a4186cbcf4ba106e1c64bf6fef9b1_JaffaCakes118

General

Target

5c7a4186cbcf4ba106e1c64bf6fef9b1_JaffaCakes118
Size

247KB
MD5

5c7a4186cbcf4ba106e1c64bf6fef9b1
SHA1

2d6b5f56118938db7786caf3f85f676ccb2c8605
SHA256

2119aa0ecffb67fe2450956eab098f7077135d25c6d0b92ff2516f0249fe90dd
SHA512

92afe08f661319bc600a6c323287f12d3c3afbbc2647f1e5b73087ba745d923eefb7b8d48ba7a2b733c6b195e24fbd6ba092d1b41d60d11e9ddd3295afb3da63
SSDEEP

6144:OibIAwJeGxlW6ASCJaWTBhM+zVVRZUUvSEmRx3R+9knL49sGUXqFV:OibIAseGxlDJQpTBO+zNOUKE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c7a4186cbcf4ba106e1c64bf6fef9b1_JaffaCakes118

Files

5c7a4186cbcf4ba106e1c64bf6fef9b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

250285eaaddf522dd8453e90c2333fb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateFileMappingA
EnumResourceNamesA
EnumTimeFormatsW
ExitProcess
GetFileType
GetOverlappedResult
GetProcessHeap
GetProcessShutdownParameters
GetTapeStatus
GetUserDefaultLangID
GlobalGetAtomNameW
GlobalReAlloc
HeapFree
HeapSize
IsDebuggerPresent
OpenFile
SetConsoleMode
SetConsoleTextAttribute
SetConsoleTitleW
WaitForSingleObjectEx
_hread
lstrcmpiW
lstrcpyn

user32

AppendMenuA
CharToOemW
DdePostAdvise
DefMDIChildProcA
DrawCaption
DrawCaptionTempW
EnumPropsExA
GetClassInfoA
GetKBCodePage
GetMenuContextHelpId
GetPropA
GetWindowPlacement
InsertMenuItemA
IsCharAlphaNumericW
IsCharLowerW
IsCharUpperA
IsWindowVisible
LoadCursorW
LoadMenuIndirectW
MessageBeep
OffsetRect
SetClassLongA
SetWindowTextA
TileChildWindows

gdi32

AbortPath
CreateColorSpaceW
CreateDIBSection
CreateEllipticRgn
CreateFontW
DeleteMetaFile
DeleteObject
ExcludeClipRect
GetEnhMetaFileHeader
GetMetaFileBitsEx
GetMetaFileW
GetPixelFormat
GetWorldTransform
LineDDA
PolyBezier
RemoveFontResourceA
ResetDCA
ResizePalette
SetColorAdjustment
SetEnhMetaFileBits
SetMiterLimit
SetPaletteEntries
SetPixel
SetWindowOrgEx
SetWorldTransform
StartDocA
TranslateCharsetInfo

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 225KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

250285eaaddf522dd8453e90c2333fb2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 512B - Virtual size: 4KB

.data Size: 225KB - Virtual size: 240KB

.idata Size: - Virtual size: 12KB

.rsrc Size: 20KB - Virtual size: 216KB

.text
Size: 512B - Virtual size: 4KB

.data
Size: 225KB - Virtual size: 240KB

.idata
Size: - Virtual size: 12KB

.rsrc
Size: 20KB - Virtual size: 216KB