8dddc6f6110f271da0bb755cdbe1ff4c_JaffaCakes118

General

Target

8dddc6f6110f271da0bb755cdbe1ff4c_JaffaCakes118
Size

27KB
MD5

8dddc6f6110f271da0bb755cdbe1ff4c
SHA1

bdf4bfe2d3bd8da8a10c74dc95038aec30ad3cd6
SHA256

5be4a3cfe642a3c3fe0b872c23dbcd847327e9b7f05a1f9a59ee295816b0a89e
SHA512

663d0f15193f64dc77abd1fb052b268180982c0f135be78da8e06823a15b3989977c829b1af8105b4ed5484272ca3146d75e2187d89b056185332613fd7fa265
SSDEEP

384:389lToXOvYMk2od7fnSAjcOUD6z0qqEDM9/yZj+BpUtGsFItc244WJCOftix:sUXaknd7PSAjcAzBrLj+r82gC+t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dddc6f6110f271da0bb755cdbe1ff4c_JaffaCakes118

Files

8dddc6f6110f271da0bb755cdbe1ff4c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

58c1c9e147be181c622a398a34d72229

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryW
CreateFileW
CreateProcessW
ExitProcess
ExpandEnvironmentStringsW
GetExitCodeProcess
GetLastError
GetModuleHandleW
GetTempFileNameW
GetTempPathW
MultiByteToWideChar
WaitForSingleObject
WriteFile
lstrcatW
lstrcpyW
lstrlenW

wininet

InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
HttpQueryInfoW

user32

CheckDlgButton
DialogBoxIndirectParamW
DispatchMessageW
EnableWindow
EndDialog
EnumChildWindows
FindWindowExW
GetClientRect
GetDlgItem
GetDlgItemTextW
GetWindowLongW
GetWindowRect
IsDlgButtonChecked
MessageBoxW
PeekMessageW
PostMessageW
RegisterWindowMessageW
SendMessageW
SetDlgItemTextW
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
TranslateMessage
wsprintfA
wsprintfW

advapi32

RegCloseKey
RegCreateKeyW
RegOpenKeyExW
RegQueryValueW
RegQueryValueExA
RegQueryValueExW
RegSetValueW
RegSetValueExW

gdi32

CreateFontIndirectA

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW

Sections

.c
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.b
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.r
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58c1c9e147be181c622a398a34d72229

Headers

File Characteristics

Imports

kernel32

wininet

user32

advapi32

gdi32

shell32

Sections

.c Size: 11KB - Virtual size: 10KB

.b Size: - Virtual size: 6KB

.r Size: 16KB - Virtual size: 16KB

.c
Size: 11KB - Virtual size: 10KB

.b
Size: - Virtual size: 6KB

.r
Size: 16KB - Virtual size: 16KB