9657ea4936c086f01cb464d260c92455_JaffaCakes118

General

Target

9657ea4936c086f01cb464d260c92455_JaffaCakes118
Size

3.7MB
MD5

9657ea4936c086f01cb464d260c92455
SHA1

148482e869298791588d0a9cf38dd15c91eb60f0
SHA256

d12d47b64dc3f6358bd604a38a7273008dade746f8ae1a20ac8416f2d9b13ff9
SHA512

0a424d3831a9879c46bd2c3addffd26bdf6c1272915bc29a166344d9202b092a577b7bc8e44dcb4686a50f54b63770c50b49348e68d421ef8e9c0a04bb0820c8
SSDEEP

98304:jvXduljY1KcO8Go4ekgymUZgNbV+wIOPfA+zXVJsT/gmxbD+/lC:LD1AQ4FaUyNB/XJKgMb0lC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9657ea4936c086f01cb464d260c92455_JaffaCakes118

Files

9657ea4936c086f01cb464d260c92455_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfe73124486bdb3b9a70911d99e1e572

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameA
GlobalFindAtomA
CreateMutexA
FreeEnvironmentStringsA
OpenMutexA
GetTickCount
GetFileAttributesExA
UnhandledExceptionFilter
PeekConsoleInputW
WritePrivateProfileSectionA
LocalSize
GetSystemInfo
MoveFileW
GenerateConsoleCtrlEvent
SetEvent
GlobalFree
GetPrivateProfileSectionW
SetConsoleOutputCP
EnumSystemCodePagesW
ReadConsoleOutputA
DebugBreak
CreateMutexW
PrepareTape
GetACP
ExitProcess

comdlg32

GetOpenFileNameW
ReplaceTextA

user32

ModifyMenuW
SetLastErrorEx
BroadcastSystemMessageW
WaitMessage
GetMenuItemRect
DrawTextA
FrameRect
ScrollDC
PostMessageW
RegisterWindowMessageW
OpenWindowStationA
ShowCursor
MonitorFromWindow
SetDlgItemTextW
DrawIconEx
GetMessagePos
DialogBoxParamA
GetCaretBlinkTime
SendMessageCallbackW
ChangeDisplaySettingsW
LoadMenuA
GetDoubleClickTime
IsWindowUnicode
ValidateRect
GetTabbedTextExtentW
CopyAcceleratorTableA
TranslateAcceleratorW
SetCapture

comctl32

CreatePropertySheetPageA
ImageList_GetBkColor

msvcrt

_snprintf
ftell
_wremove
_isatty
_mbschr
fgetwc
_wsystem
_wpopen
fopen
_wfopen
_splitpath
_wcsnicmp
_ui64tow
_ismbcdigit
_wsopen
_mbsrchr
iswprint
srand
fgetc
_beginthread
_mbsstr

Sections

.text
Size: 12KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfe73124486bdb3b9a70911d99e1e572

Headers

File Characteristics

Imports

kernel32

comdlg32

user32

comctl32

msvcrt

Sections

.text Size: 12KB - Virtual size: 231KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3.5MB - Virtual size: 3.5MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 12KB - Virtual size: 231KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3.5MB - Virtual size: 3.5MB

.rsrc
Size: 19KB - Virtual size: 18KB