a0622a0762cf80e9c8a9286a8b3d8bf5_JaffaCakes118

General

Target

a0622a0762cf80e9c8a9286a8b3d8bf5_JaffaCakes118
Size

150KB
MD5

a0622a0762cf80e9c8a9286a8b3d8bf5
SHA1

d4da0c8bf3a0104d2c92daa9a833e67edb379668
SHA256

683072ef137c12d14c4dc5074abee455d02fd2b9c3b0e9aa185c8cb41e052ad9
SHA512

926ffc7aee2cb70e75ba7f0b8b7f2470c5bc5bb4480ea42d86c6a8d6807a1480ba9df2ab3ccbdb5051644e99138f24dcad6e6081a65ade1f7406bee148626d58
SSDEEP

3072:qh5EOO31DwIrgu0DGi7dHZDcxtmHoYADT3mFNthHYBXEPNPk/JrsxdH6Pr1fvIKm:q4Oy1DwIrgu0DGi7dHZDcxtmHY3mFNtV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0622a0762cf80e9c8a9286a8b3d8bf5_JaffaCakes118

Files

a0622a0762cf80e9c8a9286a8b3d8bf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38f670e0ce3ec5cde71e1d36dd5b6157

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

CreatePatternBrush

kernel32

AddAtomA
CreateSemaphoreA
DeleteFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
RemoveDirectoryA
SetFileAttributesA
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WritePrivateProfileStringA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
getenv
malloc
memchr
memcpy
memmove
memset
signal
strcmp
strlen

user32

CreateWindowExA
DefWindowProcA
DialogBoxParamA
DispatchMessageA
EndDialog
GetMessageA
LoadCursorA
LoadIconA
LoadImageA
MessageBoxA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

38f670e0ce3ec5cde71e1d36dd5b6157

Headers

File Characteristics

Imports

gdi32

kernel32

msvcrt

user32

Sections

.text Size: 55KB - Virtual size: 54KB

.data Size: 512B - Virtual size: 272B

.rdata Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 18KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 13KB - Virtual size: 13KB

.text
Size: 55KB - Virtual size: 54KB

.data
Size: 512B - Virtual size: 272B

.rdata
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 18KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 13KB - Virtual size: 13KB