8d36bfb629f8cecc354a89167bf5ae0e_JaffaCakes118

General

Target

8d36bfb629f8cecc354a89167bf5ae0e_JaffaCakes118
Size

68KB
MD5

8d36bfb629f8cecc354a89167bf5ae0e
SHA1

7ee0649c7d93044f5531b6e6542e4fac2514944d
SHA256

be0e1878aa7d2bef44dc1fefd483267b842cedc87da080ed314013abfd147785
SHA512

533b90cf18aae75317c228c1132a7712a49e614efc5803617851ca36b07dee99bf25e4ef74b720a0f456913389fe57ea90be004de3ae55380ba485d88c0d3621
SSDEEP

1536:ddYUwwjn86yR8q99F2Jl49u3D1S6EcWDbUwj:Ye8wqzF2JKwStcYow

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d36bfb629f8cecc354a89167bf5ae0e_JaffaCakes118

Files

8d36bfb629f8cecc354a89167bf5ae0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec3904110d84f06b703644b0ebfef6ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
SetWaitableTimer
GetCurrentThread
LoadLibraryW
GetDriveTypeW
GlobalAlloc
GlobalAddAtomW
GetFileSize
SetEvent
GetSystemTime
CreateFileW
WriteFile
WideCharToMultiByte
GetCurrentProcess
MultiByteToWideChar
GetTickCount
VirtualFree
GetProcAddress
SuspendThread
lstrcpyW
GetLocalTime
ReadProcessMemory
CloseHandle
GlobalUnlock

user32

DefWindowProcW
SetCursorPos
GetDlgItem
TranslateMessage
LoadCursorW
AppendMenuW
IsDlgButtonChecked
DrawTextW
RedrawWindow
DispatchMessageW
SetCursor
SendMessageW
VkKeyScanW
LoadStringW
SystemParametersInfoW
EnableWindow
OffsetRect
UpdateWindow
MessageBoxW

gdi32

SetTextColor
CreateSolidBrush
DeleteObject
GetMapMode
DeleteDC
GetDeviceCaps
GetClipBox
CreateCompatibleDC
CreateFontIndirectW
CreateRoundRectRgn

advapi32

RegDeleteValueW
RegQueryValueExW
SetSecurityDescriptorDacl

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PEPACK!!
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ec3904110d84f06b703644b0ebfef6ae

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

PEPACK!! Size: 12KB - Virtual size: 12KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

PEPACK!!
Size: 12KB - Virtual size: 12KB