76f279659af6d643841866b775a4f35e_JaffaCakes118

General

Target

76f279659af6d643841866b775a4f35e_JaffaCakes118
Size

51KB
MD5

76f279659af6d643841866b775a4f35e
SHA1

e3a8f41eb958cd65b42da3c427257cc6ca0abe8a
SHA256

754b737a0eaca0a46c051e4519cad74a115f4745a4afc5d02cad2a330eb74a95
SHA512

889fdda531f90f623d7dac998a64432f20a0b89a3d88023c60e46b9155194ee3a7c95264c8bac31e53311f999267289b55a0b9ca6c7630b389d6afdd2e2a57bd
SSDEEP

768:GQpXDrLlbizsU9t0S6B8LbRJlk7eeSpeqz4FFA+01Z8G:GSdYt0S6B8ZkQeyYFoZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76f279659af6d643841866b775a4f35e_JaffaCakes118

Files

76f279659af6d643841866b775a4f35e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

645e8f6fdbbaa1cd4b7cf1768db65fb0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetProcAddress
RtlUnwind
Sleep
LocalAlloc
GlobalAlloc
lstrcpyA
WritePrivateProfileStringA
LocalFree
GetTickCount
GlobalFree
GetCommandLineA
VirtualProtect
FreeLibrary

user32

LoadIconA
wsprintfA
SendDlgItemMessageA
GetMessageA
DispatchMessageA
ReleaseDC
GetDlgItem
GetForegroundWindow
SetTimer
KillTimer
GetDC
FillRect
GetClientRect
FindWindowA
RegisterWindowMessageA
RegisterClassA
CreateWindowExA
SetForegroundWindow
TranslateMessage
SendMessageA
PostMessageA
PostQuitMessage
GetParent
IsWindow
SetCursor
GetCursorPos
DefWindowProcA
EndDialog
EnableWindow
GetDlgItemInt
GetSystemMetrics

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueExA

gdi32

GetClipBox
CreateFontIndirectA
DeleteObject
PatBlt
GetStockObject

msvcr71

_except_handler3
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

645e8f6fdbbaa1cd4b7cf1768db65fb0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

msvcr71

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 34KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 34KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB