5cde8e456ee6177cfc873604580ac081_JaffaCakes118

General

Target

5cde8e456ee6177cfc873604580ac081_JaffaCakes118
Size

48KB
MD5

5cde8e456ee6177cfc873604580ac081
SHA1

6e6c1ba2e9918ad9cd3defe12ec26e9029b8b40a
SHA256

39318e861c1f1dbfbb6900d111e86def033a3f8bfa694ea33b49c694ed2cb7f1
SHA512

7b1a9fb48550ac281e0a6aced488fc847e34d8b9b0a598503888b8a3ee29bfc686e37b0ff95b14726d50ac8966b85da1c4fa125bb6c2271c70d3ad6b7c73cfd0
SSDEEP

768:i8pHOHvBaiRlhoy4FbNhf3OihBxSqPEiN1A8Bb2qAe6xWnZHw/rEiyfXTaLBQOyp:+7Loy4ZNphBxv9BbGe6xEZHUIDfeaBD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cde8e456ee6177cfc873604580ac081_JaffaCakes118

Files

5cde8e456ee6177cfc873604580ac081_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03ebca705a5a529175d5fa95da5cd0fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetBkMode
SetTextColor
GetTextMetricsA
CreateSolidBrush
BitBlt
SaveDC
LineTo
SetROP2
SetBkColor
GetObjectA
SelectObject

user32

EmptyClipboard
AppendMenuA
LoadIconA
FillRect
ShowWindow
FindWindowA
DialogBoxIndirectParamA
EndDialog
DefMDIChildProcA
DrawTextA

ole32

OleCreateLinkFromData
CoCreateFreeThreadedMarshaler
OleCreateLinkFromDataEx
CoRevokeClassObject
CoGetStdMarshalEx
OleCreateMenuDescriptor
CoGetInterfaceAndReleaseStream
CoTaskMemAlloc
OleCreateLinkToFileEx
CoReleaseMarshalData
OleQueryCreateFromData

kernel32

IsValidCodePage
GetConsoleOutputCP
MulDiv
GetStringTypeA
GetOEMCP
SetProcessWorkingSetSize
InitializeCriticalSection
HeapFree
SetThreadAffinityMask
RtlUnwind
lstrlenA
ExpandEnvironmentStringsA
HeapCreate
GetCurrentDirectoryA
GetStringTypeW
GetTimeFormatA
CreateThread
IsDebuggerPresent
lstrcatA
VirtualFree

advapi32

RegDeleteValueA
SetSecurityInfo
LookupPrivilegeNameA
RegEnumValueA
LookupPrivilegeValueA
RegCreateKeyExA
OpenServiceA
AdjustTokenPrivileges
AllocateAndInitializeSid
LookupAccountSidA
MapGenericMask

msvcrt

wcsrchr
_pctype
sprintf
_fullpath
wcscat
__setusermatherr
_wcsnicmp

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03ebca705a5a529175d5fa95da5cd0fa

Headers

File Characteristics

Imports

gdi32

user32

ole32

kernel32

advapi32

msvcrt

Sections

.text Size: 42KB - Virtual size: 41KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 1024B

.text
Size: 42KB - Virtual size: 41KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 1024B