82179bb47b6d9a59f3fe81d52d9e1e4e_JaffaCakes118

General

Target

82179bb47b6d9a59f3fe81d52d9e1e4e_JaffaCakes118
Size

28KB
MD5

82179bb47b6d9a59f3fe81d52d9e1e4e
SHA1

a06fb7b2fc48e1015f10797044c132f95943d5fe
SHA256

b13e280c5574d3552b4ed2c56b7eeed5fcc986cdd6b018831886f795cc2d945e
SHA512

5e8e8e7543dc56db8df3b8d481ac34c05c2d52b680875f41c83a6ab158341639a60e455b0bb529d961e8a9221e422026f96d9b497525a8b4db5914a3f45d9257
SSDEEP

384:lihsEv3B3zbFCdIQrGYD5WSnMzd5fjFY97KJ7kchn4G4:lEsQsdIj05WSMzd5r+xAz4G4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82179bb47b6d9a59f3fe81d52d9e1e4e_JaffaCakes118

Files

82179bb47b6d9a59f3fe81d52d9e1e4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e0d73f464ddba9fa9cccae61ff19d56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GlobalFree
GetStdHandle
WriteFile
DeleteFileW
CopyFileW
GetFileTime
GetLastError
GetCPInfo
CreateThread
CreateDirectoryA
FindFirstFileA
CreateProcessA
OpenFileMappingA
OpenFile
CopyFileExA
DeleteFileA
GetFileSize
ReadConsoleA

comctl32

ImageList_Replace
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Read
ImageList_Copy
ImageList_DragShowNolock
ImageList_Remove
ImageList_Merge
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_AddIcon
ImageList_DragEnter
ImageList_LoadImageW
ImageList_Draw
ImageList_AddMasked
ImageList_DragLeave

gdi32

AddFontResourceW
DeleteObject
AddFontResourceExA
SetTextColor
BitBlt
ExtTextOutA
AddFontResourceTracking
ClearBrushAttributes
AddFontResourceA
GetBitmapBits
CreateSolidBrush
CancelDC
GetClipBox
AddFontResourceExW
GetPixel
AddFontMemResourceEx
DeleteDC
GetBrushOrgEx
CopyMetaFileA
GetCurrentPositionEx
ClearBitmapAttributes

advapi32

RegDeleteValueA
RegReplaceKeyA
RegReplaceKeyW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryValueA
RegQueryValueW
RegDeleteValueW
RegGetKeySecurity
RegDeleteKeyA
RegOpenKeyA
RegEnumValueW
RegCreateKeyExW
RegQueryInfoKeyA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e0d73f464ddba9fa9cccae61ff19d56

Headers

File Characteristics

Imports

kernel32

comctl32

gdi32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 5.1MB

.rsrc Size: 1024B - Virtual size: 780B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 5.1MB

.rsrc
Size: 1024B - Virtual size: 780B