8a0a2f17777ba7233c3bcff2b57e1182_JaffaCakes118

General

Target

8a0a2f17777ba7233c3bcff2b57e1182_JaffaCakes118
Size

155KB
MD5

8a0a2f17777ba7233c3bcff2b57e1182
SHA1

1f18a7cc09b271a11f6af4a470c0fddba46fe228
SHA256

1145833e2560c6e89b8f1a13261af83531fcd5e8a092e2c696e6df24fc4000eb
SHA512

ace9784abfc62a49869a2b7f5c8a4b2b18102b424109122ffe507a1f99e9092cf97cf08d6c1aac2c1d0cec54ddf89cd694913bc54334ef432ef8ae00f98d5b4f
SSDEEP

3072:mIILPPEHIP02dkwClJ4cO7LrBTL0ZuOz91cCmOaOr0:6ooHClJo5TLwn0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a0a2f17777ba7233c3bcff2b57e1182_JaffaCakes118

Files

8a0a2f17777ba7233c3bcff2b57e1182_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eb669b3956c1d917f7c91469cacb3b09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AreFileApisANSI
GetThreadPriority
lstrcpyW
GetVersion
GetStartupInfoW
SetThreadPriorityBoost
GetThreadContext
lstrcpyA
FlushConsoleInputBuffer
RemoveDirectoryA
MoveFileW
GetModuleFileNameW
TerminateThread
GetCurrentThread
MoveFileA
DeleteAtom
GetModuleHandleA
GetSystemDefaultLangID
GetVersionExA
LoadLibraryExA
GetProcessPriorityBoost
GetSystemInfo
GetConsoleCP
GetCurrentProcessId
GlobalFindAtomA
GetEnvironmentStringsW
OpenJobObjectW
CreateEventA
Module32First
SetEnvironmentVariableW
OpenJobObjectA
GetCurrentThreadId
VirtualAlloc
WaitForSingleObject
GetProcAddress
LoadLibraryA
IsBadReadPtr
VirtualProtect
ExitProcess
VirtualFree

user32

GetMessagePos
InSendMessage
GetDlgItem
GetCaretPos
GetClipboardSequenceNumber
IsWindowUnicode
GetForegroundWindow
GetOpenClipboardWindow
GetActiveWindow
DestroyCaret
GetSystemMetrics
GetFocus
IsIconic
GetMenuItemCount
GetCaretBlinkTime
GetMenu
GetInputState
DestroyWindow
PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
MessageBoxA
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA

winmm

PlaySoundA

Sections

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb669b3956c1d917f7c91469cacb3b09

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

winmm

Sections

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 200KB

.text Size: 122KB - Virtual size: 121KB

.rsrc Size: 38KB - Virtual size: 38KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 200KB

.text
Size: 122KB - Virtual size: 121KB

.rsrc
Size: 38KB - Virtual size: 38KB