82c2f56366af4acc12e2d7c6bb029ad7_JaffaCakes118

General

Target

82c2f56366af4acc12e2d7c6bb029ad7_JaffaCakes118
Size

27KB
MD5

82c2f56366af4acc12e2d7c6bb029ad7
SHA1

330c68d33ae2e7cb3e4a2ae83eca1286f9a75a53
SHA256

1c2a27aa08d4e2d7842c455174645ddbd6bf339ab04bf5684e7b50fbf64b8332
SHA512

7e43fff84c9bb08dfb04a3ea23d13bc5e7d7faedfa19b1d78f1db69e78d573017ed7dd9ce80370f26f1b354ed9311281845614881d0ea62abcaee49ce24fd639
SSDEEP

384:jzZCtTw969x7CYzCs8vQ03wkeZqZu87yNeOgQHmaKXWmGZ3rarLYWj1z2W3SWd:jEJwoyEL0O38XNQKXWm5YW1vR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82c2f56366af4acc12e2d7c6bb029ad7_JaffaCakes118

Files

82c2f56366af4acc12e2d7c6bb029ad7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddbb7309617e1c139b8a9af55dae12cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadAcceleratorsW
DestroyWindow
AppendMenuW
GetMenuCheckMarkDimensions
GetSystemMetrics
OffsetRect
wsprintfW
MapWindowPoints
RedrawWindow
GetDoubleClickTime
IsIconic
SetMenuItemBitmaps

msvcrt

abs
memcpy
strchr
__p__fmode
strcat
_strnicmp
_wsplitpath
_ltow
srand
_itoa
wcscat

gdi32

CreateCompatibleDC
SetBkColor
Rectangle
GetTextMetricsW
SetROP2
GetObjectW
SetBkMode
EndPage
SelectObject
GetBkColor
SelectClipRgn
SetTextColor

advapi32

GetKernelObjectSecurity
RegEnumValueW
OpenProcessToken
RegDeleteValueW
ControlService
GetSidSubAuthorityCount
IsValidSecurityDescriptor
GetSidIdentifierAuthority
SetKernelObjectSecurity
GetSecurityInfo
AllocateAndInitializeSid
RegConnectRegistryW
GetLengthSid

ulib

?Initialize@STRING_ARGUMENT@@QAEEPAD@Z
?Initialize@PATH@@QAEEPBV1@E@Z
??1OBJECT@@UAE@XZ
?ResetLoggingIterator@MESSAGE@@QAEXXZ
?QueryChAt@WSTRING@@QBEGK@Z
?IsYesResponse@MESSAGE@@UAEEE@Z
?PutString@WSTRING@@IAEXPAG@Z
??1SCREEN@@UAE@XZ
??0OBJECT@@QAE@ABV0@@Z
?Construct@WSTRING@@IAEXXZ
??0MEM_BLOCK_MGR@@QAE@XZ

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddbb7309617e1c139b8a9af55dae12cc

Headers

File Characteristics

Imports

user32

msvcrt

gdi32

advapi32

ulib

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 952B

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 952B