96d1e754ec2aca5514915b138620a0d2_JaffaCakes118

General

Target

96d1e754ec2aca5514915b138620a0d2_JaffaCakes118
Size

48KB
MD5

96d1e754ec2aca5514915b138620a0d2
SHA1

09e03acefe90c6efc2228ff5b0c39178de0d879b
SHA256

ed358428737c027b0accc996c47b38a6dcd82b7a1409210e5f9eb9631a4dba97
SHA512

deb201d95e9c6d1387842bef33017f604718a687741466ffa9ba26342632c4d95d33233e91127cb48bfa1b4087172afff9497d8af5eb3e6b7c898fd6595bda80
SSDEEP

768:/yWflTh/JaW4TJaanEDloTJHfs5eHPFLAOfM3f65Wqvfeu7BS4ixidHnVS:jflTFJazT8anrdUQ9Aogf6zvfek0wdHE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96d1e754ec2aca5514915b138620a0d2_JaffaCakes118

Files

96d1e754ec2aca5514915b138620a0d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d841aae054b9c40b9aa094c7eea57f7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
GetCurrentProcess
CreateFileA
SetHandleCount
GetFileType
lstrcpyA
lstrcpynW
GetStringTypeW
SetFilePointer
MultiByteToWideChar
GetStartupInfoA
GetStringTypeA
LCMapStringA
TerminateProcess
GetStdHandle
LCMapStringW
GetVersion
GetOEMCP
lstrcatA
WriteFile
GetCommandLineA
GetCPInfo

user32

DrawIcon
CopyImage
CopyRect
LoadCursorA
GetDC
IsWindow
DialogBoxParamA
DialogBoxParamW
CopyIcon
CreateIcon
DrawTextW
GetFocus
DrawIconEx
CloseWindow
IsMenu
GetCursor
LoadMenuA
GetDlgItem
DrawTextA
GetWindowTextLengthA
EndDialog
InsertMenuA
GetWindowTextA

comctl32

ImageList_LoadImageW
MenuHelp
CreateUpDownControl
CreateToolbarEx
ImageList_GetIconSize
ImageList_AddIcon
ImageList_Copy
DllGetVersion
InitCommonControls
ImageList_DragEnter
DrawStatusText
ImageList_Add

advapi32

RegCreateKeyW
RegCreateKeyExA
RegOpenKeyA
RegSetValueA
RegQueryValueExW
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyW
RegEnumValueA
RegCreateKeyExW
RegDeleteValueW
RegCreateKeyA
RegSetValueW

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 17.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d841aae054b9c40b9aa094c7eea57f7c

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 42KB - Virtual size: 17.5MB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 42KB - Virtual size: 17.5MB