00347e71457123a789f1aa0a1a662a9e_JaffaCakes118

General

Target

00347e71457123a789f1aa0a1a662a9e_JaffaCakes118
Size

784KB
MD5

00347e71457123a789f1aa0a1a662a9e
SHA1

6086a3206f2e2beec6f556cc252c1d8a7adac60d
SHA256

9eb5985f45a5aaeaf24a8ca4a3ded770c03beaef2f51520da3c8b9a69c597dc6
SHA512

abb7646bf5f204bedea9e358b223bec7df44f97fba4dbffca7c756e03062d66305f42b0958ba4fe340b1fc5c4f5717292fe738aed0380fe8514936922dc8db42
SSDEEP

24576:0PW9cThaekv6ixQZYk1gnBgGXzgFG8kjTkHiAYZ+w:D9dFv6btKLycB7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00347e71457123a789f1aa0a1a662a9e_JaffaCakes118

Files

00347e71457123a789f1aa0a1a662a9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a1a330f73d578890a2f489a43c8aa91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lwrite
_lcreat
_llseek
_lclose
_lopen
GetSystemDefaultLangID
DeleteFileA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
_lread
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetTempPathA
SetCurrentDirectoryA
lstrcpyA
CreateDirectoryA
GetDiskFreeSpaceA
lstrcatA
WritePrivateProfileStringA
CreateProcessA
CloseHandle
GetModuleFileNameA
lstrlenA
GetPrivateProfileStringA
lstrcmpA
WriteFile
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
GetStringTypeW

user32

SendMessageA
DefWindowProcA
MessageBoxA
wsprintfA
MsgWaitForMultipleObjects
PeekMessageA
BeginPaint
DrawTextA
EndPaint
DestroyWindow
PostQuitMessage
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetDesktopWindow
GetWindowRect
CreateWindowExA
GetClientRect
ShowWindow
UpdateWindow
LoadStringA
LoadIconA
LoadCursorA
RegisterClassExA
RegisterClassA

gdi32

GetDeviceCaps
SelectObject
SetBkMode
CreateFontA

comctl32

ord17

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a1a330f73d578890a2f489a43c8aa91

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 40KB - Virtual size: 37KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 40KB - Virtual size: 37KB