835f2a6ea1f7916307ee841bcfc8e2a4_JaffaCakes118

General

Target

835f2a6ea1f7916307ee841bcfc8e2a4_JaffaCakes118
Size

84KB
MD5

835f2a6ea1f7916307ee841bcfc8e2a4
SHA1

782c786535aefcd2edcbb18c0ad53d822dad6b5c
SHA256

ea271b21d8cca80fa7b6a7b43e17ddb4af5b5cbfd8e72a458ca68d69a20e65ca
SHA512

31847bdb6e7c20dbffca911ab59da61e9344190ab0790da2ebeff5bb7754e8414e57c69619f1ea77432710b3a08e32a0a13402b7059f671d7459b66c3ed07658
SSDEEP

1536:pLC9uR14cDTTM08e6mQ5IAZwC0BVTcLcCw5wNpBq/axmEUKwnxTbX3rE:pSYGcD18AlAYBVoYCwgqSHeTDY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
835f2a6ea1f7916307ee841bcfc8e2a4_JaffaCakes118

Files

835f2a6ea1f7916307ee841bcfc8e2a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84f6e1e1247ae012232c91f5e0822713

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeleteVolumeMountPointW
EnumResourceTypesA
ExitProcess
GetACP
GetBinaryTypeA
GetCommandLineA
GetCompressedFileSizeW
GetFileAttributesExA
GetModuleHandleA
GetProfileIntA
GetStartupInfoA
GetSystemTimeAsFileTime
GetVersionExA
HeapAlloc
HeapCreate
VirtualProtect
WriteFileEx
_lopen

user32

SystemParametersInfoA
SetMenuItemInfoA
SetPropA
GetSysColorBrush
GetSysColor
GetClassNameA
FindWindowA
DrawEdge

comctl32

ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_SetImageCount
ImageList_SetFilter
ImageList_Read
ImageList_GetImageInfo
ImageList_DrawEx
CreateStatusWindowW
DrawStatusTextA
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_SetScrollProp
ImageList_Add
ImageList_Copy

ole32

CoFileTimeNow
CoTaskMemAlloc
CoGetMalloc
CoCreateInstance
CoCreateGuid
CoBuildVersion

dbghelp

FindFileInSearchPath
ImageRvaToSection
SymEnumerateSymbols64

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84f6e1e1247ae012232c91f5e0822713

Headers

File Characteristics

Imports

kernel32

user32

comctl32

ole32

dbghelp

Sections

.text Size: 44KB - Virtual size: 43KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 43KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB