771c1c3a3a2093583b780cc8fbac86c7_JaffaCakes118

General

Target

771c1c3a3a2093583b780cc8fbac86c7_JaffaCakes118
Size

419KB
MD5

771c1c3a3a2093583b780cc8fbac86c7
SHA1

8c34edef37d89dc36b9109ce06e832247a6b629d
SHA256

3a7fc823c44dba6aea04afcd426833814789fbef1daebb349c618ca0345efa8b
SHA512

b8ae2570c815ba0f1a89e478ba836ffee612f60435c517be33228c29eae9aa8c4b578080b4032baaa221d075ba53fca51eef4595bd12356d17271ade93f18c73
SSDEEP

12288:2DmCUVHAfIJI6nRNBDExfAaCpe/8tugr:2cAIfPuxWwiugr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
771c1c3a3a2093583b780cc8fbac86c7_JaffaCakes118

Files

771c1c3a3a2093583b780cc8fbac86c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abab41c1e7adda0117a70420f1403610

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextLengthA
SetWindowPlacement
ArrangeIconicWindows
EndDialog
IsDialogMessageA
MessageBoxExA
GetWindowPlacement
SetForegroundWindow
EnumThreadWindows
GetForegroundWindow
DefDlgProcA
CreateDialogIndirectParamA
SetWindowPos
CloseWindow
FindWindowA

ole32

OleSetAutoConvert

oledlg

ord5
ord2
ord4
ord3
ord7
ord11
ord1
ord12
ord9
ord6

oleaut32

LHashValOfNameSysA

comctl32

ord6
CreateStatusWindowW
PropertySheetW
ord15
CreatePropertySheetPageW
UninitializeFlatSB
CreatePropertySheetPageA
DestroyPropertySheetPage
ord13
InitializeFlatSB
ord2

shlwapi

StrCSpnA
StrStrA
StrChrA

kernel32

GlobalSize
VirtualFree
GetDateFormatA
LocalAlloc
GlobalFlags
VirtualQuery
SetEvent
GetStartupInfoA
HeapValidate
GetTimeFormatA
MultiByteToWideChar
GlobalHandle
GetProcAddress
VirtualAlloc
GetModuleHandleA
WaitForMultipleObjects

msvcrt

_acmdln
acos
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_XcptFilter
_exit
__getmainargs

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

abab41c1e7adda0117a70420f1403610

Headers

File Characteristics

Imports

user32

ole32

oledlg

oleaut32

comctl32

shlwapi

kernel32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 114KB - Virtual size: 113KB

.data Size: 287KB - Virtual size: 368KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 114KB - Virtual size: 113KB

.data
Size: 287KB - Virtual size: 368KB

.rsrc
Size: 6KB - Virtual size: 5KB