961d54922c19d543ba079429a675c094_JaffaCakes118

General

Target

961d54922c19d543ba079429a675c094_JaffaCakes118
Size

296KB
MD5

961d54922c19d543ba079429a675c094
SHA1

d44e85522b56feedbca4bfcbb95852703325e175
SHA256

8ef53f27f9c16408c49152664832fb29ba1f546cc804c8662caed4432d98f76b
SHA512

0267eb2b77dedddac69f82d05632c71eef3cffe4b695ff7e17b69728b31b10b59f2b1c7db58cf369714f23130759009ba55d5cb826048e072f38637b4f166a71
SSDEEP

6144:jmyIl0ShcJJY1uoZ0gLOYBTsWLwIc9YmxID901w0:jmCSwyAlrKo9AJMw0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
961d54922c19d543ba079429a675c094_JaffaCakes118

Files

961d54922c19d543ba079429a675c094_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38d49abc13f3d711bbcc8fab451d6e62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
EnterCriticalSection
ExitThread
FindClose
FindFirstFileA
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLocalTime
GetModuleHandleA
GetPrivateProfileStringA
GetProcessHeap
GetTickCount
GlobalAlloc
GlobalLock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalSize
ResumeThread
SetEvent
SetFilePointer
Sleep
TerminateThread
UnmapViewOfFile
WaitForSingleObject
WriteConsoleA
lstrcmpA
lstrlenA

user32

AppendMenuW
CascadeWindows
CharNextA
DrawEdge
EnumWindows
FindWindowA
GetClassNameW
GetDlgCtrlID
GetSystemMetrics
InsertMenuW
IsIconic
MessageBoxA
PostMessageW
SendMessageW
SetFocus
SetMenuItemInfoW
SubtractRect
UnregisterClassW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38d49abc13f3d711bbcc8fab451d6e62

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 280KB - Virtual size: 283KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 280KB - Virtual size: 283KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB