82c1e68c4fd1b061a1151e1968418065_JaffaCakes118

General

Target

82c1e68c4fd1b061a1151e1968418065_JaffaCakes118
Size

144KB
MD5

82c1e68c4fd1b061a1151e1968418065
SHA1

a96f9e460a55cc4915ece1cae6bb826ce6930898
SHA256

40a47008cddbd9cbc129f1d6d55032045981e468895ba6d42b4c4cd8d2ee5ad5
SHA512

4a59f20d07978bac9b95fe81211c5522cd57ebecbfec941623014c8f9f314e9378152dce56b19fa6b7af9f1e38028e2aa8f66fafc6ba23c8a7c7392069707ca4
SSDEEP

1536:m4bhezdlHGuBzcXwkQlDd4FTRY8zmzvjac3B+OW13vJCfkbB+V67GliqlB4T/ylx:Qdqwm9Pzmn3BtWvCfGIMaM2uyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82c1e68c4fd1b061a1151e1968418065_JaffaCakes118

Files

82c1e68c4fd1b061a1151e1968418065_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62dfdde640c23d20a0ea0f8f74ef0798

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
DrawIcon
ReleaseDC
SetForegroundWindow
ShowWindow
GetWindowRect
SetRect
GetLastActivePopup
IsIconic
GetClientRect
CopyRect
GetSystemMetrics
TranslateMessage

gdi32

CreateDIBSection
BitBlt
GdiFlush
DeleteObject
CreateCompatibleDC
SelectObject
DeleteDC

advapi32

RegCloseKey

msimg32

AlphaBlend

wininet

InternetConnectW
InternetOpenUrlW
InternetOpenW
HttpSendRequestA
InternetGetConnectedState
InternetReadFile
HttpOpenRequestW
InternetCloseHandle

shell32

SHGetSpecialFolderPathW

shlwapi

PathUnquoteSpacesW
PathAppendW
PathAddBackslashW
PathRemoveFileSpecW
PathRemoveBackslashW
PathRemoveArgsW
PathFileExistsW

kernel32

ExitProcess
ClearCommBreak
QueryPerformanceCounter
GetSystemDirectoryA
GetCurrentThreadId
ClearCommBreak
GetStartupInfoW
DeleteCriticalSection
LoadLibraryA
CompareStringA
GetCurrentProcessId
GetModuleHandleA
GetModuleFileNameA
GetTickCount
GetWindowsDirectoryA
SetLastError
EnumResourceNamesW
GetLastError
GetSystemTimeAsFileTime
CloseHandle
ExitProcess
WaitForSingleObject
InitializeCriticalSection
FreeLibrary
GetSystemDefaultLangID
GetVersionExA
InterlockedExchange

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62dfdde640c23d20a0ea0f8f74ef0798

Headers

File Characteristics

Imports

user32

gdi32

advapi32

msimg32

wininet

shell32

shlwapi

kernel32

Sections

.text Size: 105KB - Virtual size: 104KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 35KB - Virtual size: 35KB

.rscr Size: 512B - Virtual size: 64KB

.text
Size: 105KB - Virtual size: 104KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 35KB - Virtual size: 35KB

.rscr
Size: 512B - Virtual size: 64KB