821e0f54cf868d5213b44a52578c61c6_JaffaCakes118

General

Target

821e0f54cf868d5213b44a52578c61c6_JaffaCakes118
Size

19KB
MD5

821e0f54cf868d5213b44a52578c61c6
SHA1

77fc8b808cbe91af0ff32820f51b941c61fe3e61
SHA256

5d454d82d2d46a81930278e9c1ecbd8aa6980f9e767a660a3cc97af390f6883e
SHA512

92899b894f84b8836b2d3d0d40bb8edaf7c2d815b1e78642da273de1fe023eca6ba86fb591a4eec3fda26d2ca2ac5d9b035b5262f99f17c8e08c96e7f29de438
SSDEEP

384:vebM3ToUeFWkiJCC1+Pmiqis9QlcffyqIeR:veb4oUeIkio0BisKl4q7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
821e0f54cf868d5213b44a52578c61c6_JaffaCakes118

Files

821e0f54cf868d5213b44a52578c61c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9603d079c8174549e27e979e1b0f41eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlFreeHeap
RtlAllocateHeap
wcscpy
wcscat
wcslen
_wcsnicmp
swprintf

rapi

CeGetVersionEx
CeGetSystemInfo
CeRapiUninit
CeRapiInitEx
CeCloseHandle
CeWriteFile
CeCreateFile
CeGetFileAttributes
CeCreateProcess
CeRapiFreeBuffer
CeFindAllFiles

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

wsock32

WSAStartup
WSACleanup
socket
htonl
htons
bind
listen
accept
setsockopt
recv
send
WSAGetLastError

kernel32

GetStartupInfoA
GetModuleHandleA
FindFirstFileW
FindClose
CreateFileW
ReadFile
WaitForSingleObject
CreateThread
CloseHandle
LocalFree
LocalAlloc
OutputDebugStringW
GetLastError

gdi32

GetStockObject
StretchDIBits

user32

GetClientRect
GetWindowRect
SetWindowPos
DestroyWindow
CheckMenuItem
PostQuitMessage
EndPaint
CreateWindowExW
BeginPaint
RegisterClassW
LoadCursorW
UpdateWindow
ShowWindow
LoadMenuW
GetDC
SetWindowTextW
wsprintfW
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
wvsprintfW
DefWindowProcW

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9603d079c8174549e27e979e1b0f41eb

Headers

File Characteristics

Imports

ntdll

rapi

msvcrt

wsock32

kernel32

gdi32

user32

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 8KB