95f678ba3a0753eb347b9a9bd3507cc4_JaffaCakes118

General

Target

95f678ba3a0753eb347b9a9bd3507cc4_JaffaCakes118
Size

861KB
MD5

95f678ba3a0753eb347b9a9bd3507cc4
SHA1

2983a8a526bd99590b1645c1f82a0322f8f48ec3
SHA256

13cc50fd4c66a2f051e482d2b796f0b7695fd2cd5840fb3973cbcb773ba8640d
SHA512

68b9ee6b30aa32f4e98ed17d2efa635209ea75fd4dc345ad02da729db362cc3c41853256f4949ca63bf4377795a7cf0b5fa23e8be7816c9dc0761636e8c681f7
SSDEEP

12288:Xbe5dAq+0htfFIyG8patNVcClfxSrBQF+KoG+OftrmZf8iceeVNxfRIXZzU5QxSa:Le5GMtfFIyGxjcBe+Y2kiceegX5U5Qx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95f678ba3a0753eb347b9a9bd3507cc4_JaffaCakes118

Files

95f678ba3a0753eb347b9a9bd3507cc4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

edab3aadc18e5f6c549758c470ad8a7f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterWindowMessageW
GetAsyncKeyState
LoadImageW
DialogBoxParamA
PostMessageW
EndDialog
SetRect
CallNextHookEx
GetWindowPlacement
BeginPaint
CharNextW
EqualRect
CreateWindowExW
GetClassInfoExW
SetScrollInfo
ReleaseCapture
InflateRect
GetWindowLongA
PeekMessageA

kernel32

LocalAlloc
MoveFileExW
WriteFile
FindFirstFileA
VirtualAlloc
TlsAlloc
SetStdHandle
TlsFree
lstrcmpW
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
GetSystemDefaultLangID
GetSystemInfo
OutputDebugStringW
GlobalAlloc
lstrcmpiW
SystemTimeToFileTime
GetDateFormatW
HeapAlloc
LoadLibraryA

msvcrt

__p__fmode
??1type_info@@UAE@XZ
_callnewh
__getmainargs
__set_app_type
fflush
__p__commode
exit
??2@YAPAXI@Z
_wcsnicmp

advapi32

RegEnumKeyExW
OpenSCManagerW
CloseServiceHandle
RegEnumKeyW
RegisterEventSourceW
RegQueryInfoKeyW

Sections

.text
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data/0x
Size: 512B - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

edab3aadc18e5f6c549758c470ad8a7f

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

msvcrt

advapi32

Sections

.text Size: 245KB - Virtual size: 245KB

.rdata Size: 68KB - Virtual size: 68KB

.data/0x Size: 512B - Virtual size: 1.9MB

.rsrc Size: 545KB - Virtual size: 545KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 245KB - Virtual size: 245KB

.rdata
Size: 68KB - Virtual size: 68KB

.data/0x
Size: 512B - Virtual size: 1.9MB

.rsrc
Size: 545KB - Virtual size: 545KB

.reloc
Size: 1KB - Virtual size: 1KB