774a81778a957030b865d626bc9d27d8_JaffaCakes118

General

Target

774a81778a957030b865d626bc9d27d8_JaffaCakes118
Size

124KB
MD5

774a81778a957030b865d626bc9d27d8
SHA1

09a6b29d601ef21273777c854cf2e721f0d2ba78
SHA256

971e20520675feb508348401d0fe7a60d7bdebb2862f3a5be50e46e6ddb5cb75
SHA512

efdb8aa7cb1dc1c133417c5142686d5d15e49a5179cc0695a28733024d4815d556f3477df04946ed3893565073615551b997181d51c817b6ac2f13a3e405c57e
SSDEEP

3072:mK+Usbl8HGlacHimZ/C1bPph2sEyoP7k9qpVCcPdUo:mKXUiWApUrNk9ez3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
774a81778a957030b865d626bc9d27d8_JaffaCakes118

Files

774a81778a957030b865d626bc9d27d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71266d69faba131bf02d15e536b16977

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
DeleteFileW
FindClose
lstrcpynW
GetSystemInfo
GlobalSize
VirtualAlloc
GetProcAddress
LoadLibraryA
LCMapStringA
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetACP
InterlockedExchange
RtlUnwind
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
VirtualProtect
VirtualQuery
GetLastError
WideCharToMultiByte
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
LCMapStringW

user32

GetMenu
RegisterWindowMessageW
mouse_event
GetMessageA
EmptyClipboard
GetScrollRange
LoadCursorW

comdlg32

GetOpenFileNameA
FindTextW
GetOpenFileNameW
ChooseColorW

ole32

StgOpenStorageOnILockBytes
StgOpenAsyncDocfileOnIFillLockBytes

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 82KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

71266d69faba131bf02d15e536b16977

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 82KB - Virtual size: 123KB

.rsrc Size: 72KB - Virtual size: 72KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 82KB - Virtual size: 123KB

.rsrc
Size: 72KB - Virtual size: 72KB