5eba22d6908cedf19dc19505ec9297e4_JaffaCakes118

General

Target

5eba22d6908cedf19dc19505ec9297e4_JaffaCakes118
Size

192KB
MD5

5eba22d6908cedf19dc19505ec9297e4
SHA1

e1d81cca3e359e27ac693d3ffe521edcc15a9452
SHA256

139fbf4ad88e051bfc7dcafa2e75453dca1864d36a32cf5ef5035bf0a1e314df
SHA512

8dc9cc12fb25a77fd3b4470204de45027c5ba737f16d24c1051e254c78314f284e500561dabd4ed7af3ee29382e30f4893d36252236b7874869600dcc1eef8bb
SSDEEP

3072:ErrQtNTmq4hpRFqYENwPri5LK0qBPDDVA9sATS5zdt0QhbPQzh/synShrG3wnNKe:ELxTRFqYEkr6bqBLDK9WpdGQh+OyWrGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5eba22d6908cedf19dc19505ec9297e4_JaffaCakes118

Files

5eba22d6908cedf19dc19505ec9297e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89ed50db13ef806b31ce214eba0b16d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
MultiByteToWideChar
WritePrivateProfileStringA
LCMapStringA
LCMapStringW
GetStringTypeA
VirtualAlloc
HeapAlloc
GetOEMCP
HeapReAlloc
GetPrivateProfileStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetStringTypeW

user32

CheckDlgButton
GetClientRect
FillRect
EndPaint
DialogBoxParamA
BeginPaint
EndDialog

gdi32

DeleteObject
SetBkMode
CreateSolidBrush
SelectObject

shlwapi

PathFileExistsA
SHGetValueA

comctl32

ord17

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89ed50db13ef806b31ce214eba0b16d6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shlwapi

comctl32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 168KB - Virtual size: 166KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 168KB - Virtual size: 166KB

.rsrc
Size: 4KB - Virtual size: 1KB