86166e34b556f20265b88c144152b94a_JaffaCakes118

General

Target

86166e34b556f20265b88c144152b94a_JaffaCakes118
Size

80KB
MD5

86166e34b556f20265b88c144152b94a
SHA1

621976037eb4db0b7324f95550947ca80a318163
SHA256

ad5b8a848bcf13ced28fc596d10c5a4806166e44088ab0cb6730ab048f477001
SHA512

f998321c44b7b4590da1b9aee337bb4740fac6a2d4e9546789b43a92b59e4fc42066fb05dfd2d0693ed458f778e51c58eeec7792eda2bef8c88ac93b06cb710d
SSDEEP

1536:I0DPHv8U7V3i7wWFzWtdkQPTDER74qc5iNCfV2iRk7Lf:JDfv86Ji8gITIxk3fVA7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86166e34b556f20265b88c144152b94a_JaffaCakes118

Files

86166e34b556f20265b88c144152b94a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86fbaaf7553e97c1235ed3b4f8ce7b32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
VirtualFree
LoadLibraryA
VirtualProtect
MoveFileWithProgressA
GetPrivateProfileIntW
GetModuleHandleA
FlushFileBuffers
GetDiskFreeSpaceA
GetPrivateProfileIntA
SetEvent
CompareFileTime
GetCompressedFileSizeA
GetLastError
GetModuleHandleW
GetStdHandle
ReleaseMutex
MoveFileA
VirtualAlloc

msvcrt

iscntrl
sinh
_vsnprintf
gmtime
_mbccpy
getc
__STRINGTOLD
__iscsym
ispunct
localtime
_CIatan2
wcslen
putwchar
perror
_execle
atexit
memcpy
_wrename
isalnum
_wfindfirst
_mbsrev
_wexecl

comdlg32

GetSaveFileNameW
dwOKSubclass
PageSetupDlgA
PrintDlgA
ChooseFontA
GetFileTitleW
FindTextW
LoadAlterBitmap
ReplaceTextW
PrintDlgA
CommDlgExtendedError
dwLBSubclass
GetSaveFileNameA
ChooseColorA
WantArrows
CommDlgExtendedError

winmm

auxGetDevCapsW
waveInGetNumDevs
mciExecute
timeGetSystemTime
timeGetTime
waveOutPause
mciFreeCommandResource
midiInReset
midiInStart
waveOutGetDevCapsA
timeGetDevCaps
OpenDriver
mciGetDeviceIDA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86fbaaf7553e97c1235ed3b4f8ce7b32

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

comdlg32

winmm

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 18KB - Virtual size: 18KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 64B

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 18KB - Virtual size: 18KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 64B