8b45194f24d0311bc1c472b2e1f7583d_JaffaCakes118

General

Target

8b45194f24d0311bc1c472b2e1f7583d_JaffaCakes118
Size

18KB
MD5

8b45194f24d0311bc1c472b2e1f7583d
SHA1

3715295c8ecbaabe2eccecad8b5049da35ca549d
SHA256

97cf2ed890e7909c8b18df637dab814a037b12c7d26abf9f5153f420405b1023
SHA512

8d629142dab2902d86db2e999b1d9b1f53b3e77e2af34ad98ab873ef37da8d0d2b71074a86716b2c2e37a86374561e47c362509b642ed50781eda5687580a236
SSDEEP

192:WCTBCBt8KAr3iMOGMPA+mjVW56PNQW0aA4hI8pa0j/rkDv9jx:WAQBSvrSMO9PFcPPNQPaQ8paCzkDv9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b45194f24d0311bc1c472b2e1f7583d_JaffaCakes118

Files

8b45194f24d0311bc1c472b2e1f7583d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b2c23389bbc49e5dbf936a6c5c6e6c18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

000000000000000000000000

Imports

kernel32

VirtualAlloc
ReadFile
SetFilePointer
GetFileSize
CreateFileA
Sleep
GetCurrentProcess
GetCurrentProcessId
WriteFile
GetCommandLineA
GetLastError
HeapFree
MultiByteToWideChar
VirtualFree
WideCharToMultiByte
lstrcmpA
GetProcessHeap
CreateThread
lstrlenA
lstrcpyA
GetVersionExA
GetExitCodeProcess
SetNamedPipeHandleState
DuplicateHandle
CreatePipe
lstrlenW
GetLocalTime
CreateDirectoryA
ReleaseMutex
WaitForSingleObject
TerminateThread
GetExitCodeThread
DeleteFileA
CreateMutexA
lstrcmpiA
GetStartupInfoA
GetEnvironmentVariableA
lstrcatA
GetModuleHandleA
VirtualAllocEx
TerminateProcess
CloseHandle
SetThreadContext
ResumeThread
ExitProcess
LoadLibraryA
GetThreadContext

user32

DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
EnumWindows
GetForegroundWindow
IsWindowVisible
GetDesktopWindow
GetWindowRect
GetWindowDC
ReleaseDC
wsprintfA
SetForegroundWindow
SetWindowTextA
ShowWindow
SendMessageA
GetActiveWindow

gdi32

GetDeviceCaps
SelectObject
DeleteObject
SetStretchBltMode
StretchBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b2c23389bbc49e5dbf936a6c5c6e6c18

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 6KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 6KB