9414c1d243b8760fc4924e0c00672096_JaffaCakes118

General

Target

9414c1d243b8760fc4924e0c00672096_JaffaCakes118
Size

134KB
MD5

9414c1d243b8760fc4924e0c00672096
SHA1

1d821d160b0d8e8c76b49dfaf672ce1651581471
SHA256

7e428c82f4706793e1d597c70e8259e28404167518563ada539a20f0bdd283b8
SHA512

3eefadcf152064a7876dc1d316f08faa1ae9dc4df464491341b1989fdeb873749ef1adddf8f377c9a348117d13f15de7f721ca8263a0a0706eed4911cf12fa47
SSDEEP

3072:FxfihgKzKiwum8YdphtAyJtyHHfLndl7Vz:rfiQLumRz/rsnzdlt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9414c1d243b8760fc4924e0c00672096_JaffaCakes118

Files

9414c1d243b8760fc4924e0c00672096_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e05936e33b253e39b2500e67b0f76db4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
ExitProcess
GetCPInfo
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
InterlockedDecrement
IsDebuggerPresent
LoadLibraryA
TlsGetValue
VirtualAlloc
VirtualFree

user32

BeginPaint
EndPaint
GetActiveWindow
GetSysColor
GetSystemMetrics
GetWindowTextA
InvalidateRect
LoadBitmapA
LoadIconA
MapWindowPoints
MessageBoxA
PeekMessageA
RegisterClassA

gdi32

CreateCompatibleDC
CreateDIBSection
CreatePenIndirect
DeleteEnhMetaFile
GetDeviceCaps
GetEnhMetaFileHeader
GetPaletteEntries
PatBlt
PlayEnhMetaFile
SaveDC
SetMapMode
SetPixel
SetWindowExtEx
TextOutA

shell32

DoEnvironmentSubstW
DragQueryFileA
DragQueryPoint
ExtractIconExA
SHBindToParent
SHCreateDirectoryExA
SHCreateDirectoryExW
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfo
SHGetFileInfoW
SHGetFolderPathA
SHGetFolderPathW
ShellExecuteExW

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e05936e33b253e39b2500e67b0f76db4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 73KB - Virtual size: 72KB

.rsrc Size: 20KB - Virtual size: 136KB

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 73KB - Virtual size: 72KB

.rsrc
Size: 20KB - Virtual size: 136KB