73e104bb4777b263515cb29cf710fcea_JaffaCakes118

General

Target

73e104bb4777b263515cb29cf710fcea_JaffaCakes118
Size

144KB
MD5

73e104bb4777b263515cb29cf710fcea
SHA1

b75169b7cf85a436b694c7823c8484bb1aad1c70
SHA256

d6fb7f44b80c842d2b615bd014e7462b340587f044a0f8dbb71a15f70e48b5e8
SHA512

69409ed8c2b040427282a75870190d95ba069136d7a8dc789cd685a37b40f18bf95c296bb819ba0e48dc20caafff7640907ec2fad749a6cdae64b822b3f19bca
SSDEEP

3072:cMCTOPydz6ikrKkQOB95UEWdxMpUv9AbHo1HH:kTOEOrV95pW4+v9Mop

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73e104bb4777b263515cb29cf710fcea_JaffaCakes118

Files

73e104bb4777b263515cb29cf710fcea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

775efa6183580b7e49e39e8cc4a9b08f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
VirtualAlloc
lstrcpyA
LoadLibraryA
ResetEvent
CreateFileA
HeapFree
EnterCriticalSection
ExpandEnvironmentStringsW
GetVersionExW
GetFileAttributesA
GlobalLock
CloseHandle
lstrcmpiA
HeapReAlloc
OpenMutexW
lstrcpynW
lstrcatW
SetFilePointer

advapi32

GetUserNameW
CryptAcquireContextW
CryptReleaseContext
RegQueryValueExA
CryptDestroyHash
CryptGetHashParam
RegDeleteValueA
CryptCreateHash
CryptHashData
RegCreateKeyExA
DuplicateTokenEx
RegSetValueExA

user32

OpenDesktopA
DispatchMessageA
GetDlgItem
GetIconInfo
EndDialog
GetWindowLongA
LoadCursorA
SendMessageA
GetClipboardData
FindWindowExA
GetWindowThreadProcessId
OpenWindowStationA
SetThreadDesktop
GetForegroundWindow
CloseDesktop

shlwapi

PathMatchSpecW
PathFindFileNameW
PathFileExistsW
StrCmpNIA
wvnsprintfA
PathCombineW
wnsprintfA
StrCmpNIW
StrStrW
wnsprintfW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

775efa6183580b7e49e39e8cc4a9b08f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

shlwapi

Sections

.text Size: 63KB - Virtual size: 62KB

.data Size: 512B - Virtual size: 16KB

.hdata Size: 80KB - Virtual size: 80KB

.text
Size: 63KB - Virtual size: 62KB

.data
Size: 512B - Virtual size: 16KB

.hdata
Size: 80KB - Virtual size: 80KB