747c81200238d4fcde5f60019daff8d7_JaffaCakes118

General

Target

747c81200238d4fcde5f60019daff8d7_JaffaCakes118
Size

56KB
MD5

747c81200238d4fcde5f60019daff8d7
SHA1

645bdf7f6a7d5a2e6576557b159de3ddc0d34101
SHA256

0b4d9f6c71862fad76b7f8cd8ad5e74e8a9f165eb05511a279d7aec58661096d
SHA512

a6c815fd6b2ca2fe8867e67d41881aadc3b9051b7b3f42c3d5319fa1e2796ab3434edd953a353f2e9dc1bb7b1bcbd49ba65b74884a7faed99ef589d81c7fd9ef
SSDEEP

768:/VvpEED6I1ketzKXgbkBlm5dVLe5PodoadSMdh:bdD61eRGlm5dgxodoadSMdh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
747c81200238d4fcde5f60019daff8d7_JaffaCakes118

Files

747c81200238d4fcde5f60019daff8d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33826354c389457fb0d0f1859e298b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
GetProcAddress
LoadLibraryA
Sleep
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
HeapReAlloc
GetOEMCP
GetACP
VirtualAlloc
HeapAlloc
SetFilePointer
GetLastError
WriteFile
RtlUnwind
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
VirtualFree
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
CloseHandle

user32

wsprintfA
MessageBoxA
SetWindowTextA
SetCursor
ReleaseCapture
SetCapture
SetMenuItemInfoA
UnregisterDeviceNotification
DialogBoxParamA
PostQuitMessage
EndDialog
RegisterDeviceNotificationA
GetDlgItem
LoadIconA
GetMenu
SendMessageA
GetClientRect
GetSystemMetrics
MoveWindow
CreateDialogParamA
GetWindowRect
ShowWindow
UpdateWindow
LoadCursorA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
TranslateAcceleratorA
IsDialogMessageA

gdi32

CreateFontA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33826354c389457fb0d0f1859e298b63

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 16KB - Virtual size: 12KB