632fc607a144fec6feb367d6b7cb2945_JaffaCakes118

General

Target

632fc607a144fec6feb367d6b7cb2945_JaffaCakes118
Size

49KB
MD5

632fc607a144fec6feb367d6b7cb2945
SHA1

34c8c27358d9e40f99b0e6100368adb47a4bd61d
SHA256

964f72e69d5c5d3124b6ef691b4bc5895aa1eabe52702eb5987463763d60f3c6
SHA512

2fb3fd4b2b81996de9095b5c559e0c83c83362758732ebe9ee3c59508bc7e135326e7f8b9b5ee933d0192366a611fff122331791c804ca6f23064bf34fb6d999
SSDEEP

768:ikgHU1radfuFc1PvBkfFdFKgySs6zvZe5AVODJ9ebL/2drCmQMXiJ9mPT:iBMWdGFc13mf25jN9eG2yJPT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
632fc607a144fec6feb367d6b7cb2945_JaffaCakes118

Files

632fc607a144fec6feb367d6b7cb2945_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dce226e9c14e053df4792f98c2d99322

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBeep
GetTopWindow
DialogBoxParamA
ArrangeIconicWindows
CharUpperA
GetClassLongA
IsIconic
SetFocus
CharNextA
DestroyIcon
FlashWindow
GetSystemMetrics
RegisterWindowMessageA
ShowWindow
LoadCursorA
UpdateWindow
EnableWindow
CharLowerA
GetSysColorBrush
SetTimer
ShowCursor
GetMenuItemCount
GetDesktopWindow

kernel32

GlobalDeleteAtom
GetConsoleCP
lstrcatA
SetLastError
LoadLibraryA
GetProcAddress
GlobalAddAtomA
GlobalFindAtomA
FreeConsole
Sleep
lstrlenA
GetCommandLineA
FindResourceA
AllocConsole
CopyFileA
OutputDebugStringA
GetLastError

shell32

ShellAboutA

gdi32

SelectObject
GetObjectA
GdiGetBatchLimit
GdiFlush
DeleteDC
DeleteObject
SetBkColor
CreateSolidBrush

ole32

CoFreeUnusedLibraries
CoFreeAllLibraries
CoGetCurrentProcess

comctl32

InitCommonControls
FlatSB_ShowScrollBar
MakeDragList
FlatSB_GetScrollPos
DrawInsert
FlatSB_GetScrollRange
FlatSB_GetScrollProp

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dce226e9c14e053df4792f98c2d99322

Headers

File Characteristics

Imports

user32

kernel32

shell32

gdi32

ole32

comctl32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 920B

.rsrc Size: 42KB - Virtual size: 42KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 920B

.rsrc
Size: 42KB - Virtual size: 42KB