75fc12a8e60454295b028a148df6eadc_JaffaCakes118

General

Target

75fc12a8e60454295b028a148df6eadc_JaffaCakes118
Size

41KB
MD5

75fc12a8e60454295b028a148df6eadc
SHA1

de7d8feb5521534b5095093d392fdc0671b69017
SHA256

7369cf556572fd724cc2304f832f437e168a5ed572e192f4aba44b16bbc401f8
SHA512

c5cd4c9aada51dd9a5958d24683ac992dfdcf861d1d37241c51a5b75b73244745bf85e04974814d2879d2f8e507dc031ecd54b6d812b8b5157120eb64783afd3
SSDEEP

768:MYxQ0LN9T84C0xJfMPexht3DkCUDSvEHo+/kG:r/TrCCMGxhteSvnYD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75fc12a8e60454295b028a148df6eadc_JaffaCakes118

Files

75fc12a8e60454295b028a148df6eadc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce3795026141f74cca1d0e9f922f1982

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
GetSystemDirectoryA
GetModuleFileNameA
TerminateProcess
GetTempPathA
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
GetStartupInfoA
GlobalLock
GlobalAlloc
DeleteFileA
lstrlenA
Sleep
FreeLibrary
CopyFileA
GetCurrentProcessId
GetProcAddress
LoadLibraryA
GetLastError
OpenProcess
Process32Next
CreateMutexA

advapi32

RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetObjectA
GetDIBits
CreateDCA

mfc42

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_setmbcp
__CxxFrameHandler
_mbscmp
sscanf
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_controlfp
__setusermatherr

user32

EnableWindow
GetAsyncKeyState
GetKeyboardState
KillTimer
GetForegroundWindow
GetCursorPos
GetWindowRect
SetCursorPos
mouse_event
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SetTimer
SetWindowPos
SendMessageA
LoadIconA
FindWindowA

Sections

code
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ce3795026141f74cca1d0e9f922f1982

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

mfc42

msvcrt

user32

Sections

code Size: 36KB - Virtual size: 36KB

.rsrc Size: 1KB - Virtual size: 4KB

.avc Size: 2KB - Virtual size: 4KB

code
Size: 36KB - Virtual size: 36KB

.rsrc
Size: 1KB - Virtual size: 4KB

.avc
Size: 2KB - Virtual size: 4KB