8463eac023d5d9d7e61b98402e77dd75_JaffaCakes118

General

Target

8463eac023d5d9d7e61b98402e77dd75_JaffaCakes118
Size

24KB
MD5

8463eac023d5d9d7e61b98402e77dd75
SHA1

ddd6743a5b06bf223481770574029376ff28ce06
SHA256

cdf2c88345ed7c02ff4701b5f8ae93aa9bf17bb180acbe9d7008632c68459b90
SHA512

0c42954deda547579afdb330370de9c5c670125c8d3849c8ffa64619b85457fb7868d182e26604a4a8d8efbe5a8a56b27b8dc2405c58241505a7803cfa77a32f
SSDEEP

384:Cx+PidHFzZj+0B1rTLFskifJ6NsryYmFobabHj9CwRKlStww0Hb:Cx+KXzZj+0DtskiJ6JnFjj9CwUD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8463eac023d5d9d7e61b98402e77dd75_JaffaCakes118

Files

8463eac023d5d9d7e61b98402e77dd75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

302c28ccf6830144ef91bfc6cc18952f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawTextW
DrawIcon
GetMenu
LoadCursorA
CloseWindow
DialogBoxParamW
IsMenu
DrawIconEx
InsertMenuA
CreateIcon
IsWindow
DialogBoxParamA
CopyIcon
LoadMenuA
GetFocus
GetWindowTextLengthA
CopyImage
EndDialog
GetDC
GetDlgItem
GetWindowTextA
CopyRect
GetCursor
DrawTextA

kernel32

CreateFileA
TerminateProcess
GetStringTypeA
GetStdHandle
GetModuleFileNameA
GetACP
WriteFile
lstrcpyA
GetVersion
SetHandleCount
lstrcpynA
GetCPInfo
MultiByteToWideChar
LCMapStringW
GetFileType
GetStringTypeW
GetOEMCP
GetCommandLineA
SetFilePointer
lstrcatA
GetCurrentProcess
lstrcpynW
GetStartupInfoA
LCMapStringA

comctl32

CreateToolbar
ImageList_Destroy
DllGetVersion
ImageList_Copy
InitCommonControls
CreateUpDownControl
ImageList_AddIcon
ImageList_LoadImageW
ImageList_LoadImageA
CreateMappedBitmap
ImageList_GetIconSize

advapi32

RegQueryValueW
RegEnumKeyExA
RegEnumKeyExW
RegSetValueA
RegEnumKeyA
RegSetValueW
RegDeleteKeyW
RegQueryValueA
RegDeleteValueW
RegQueryValueExW
RegEnumValueW
RegEnumValueA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 16.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

302c28ccf6830144ef91bfc6cc18952f

Headers

File Characteristics

Imports

user32

kernel32

comctl32

advapi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 18KB - Virtual size: 16.6MB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 18KB - Virtual size: 16.6MB