a447acba3a239e4aaf460c19316427f5_JaffaCakes118

General

Target

a447acba3a239e4aaf460c19316427f5_JaffaCakes118
Size

136KB
MD5

a447acba3a239e4aaf460c19316427f5
SHA1

5c09fc9d857041ae72e8d59326f50518db4d4f62
SHA256

c6c26e09700897c152164661221ff19c9dc266058085b5a07c25b5284744114c
SHA512

62d6a0c6ba3a978a711c58fda02759e06bdb19955f514d61b1f389ea8ac04777f08131f3d600012b353aca57af5faf112fa7acad5ecf25082e9665fd12c0c347
SSDEEP

3072:JHWTnK/5wl6tJwg/E+ituov01clYjGBLDq+iOV:J2+/5IYEtlMq2jGBq+iOV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a447acba3a239e4aaf460c19316427f5_JaffaCakes118

Files

a447acba3a239e4aaf460c19316427f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79fa17429ad3633787fec26712f2c2e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeLabelW
lstrlenA
GetFileType
GetModuleHandleExW
SystemTimeToTzSpecificLocalTime
TransmitCommChar
AddAtomW
lstrcmpiA
ReplaceFileW
RegisterWaitForSingleObject
CreateThread
MapViewOfFileEx
EnumResourceNamesW
lstrcmpiW
IsDBCSLeadByte
PeekNamedPipe
OpenFileMappingW
GetTempPathA
TryEnterCriticalSection
FileTimeToDosDateTime
SetInformationJobObject
LoadLibraryA
CreateProcessA
EndUpdateResourceA
AreFileApisANSI
AddAtomA
SuspendThread
RtlMoveMemory
GetEnvironmentVariableW
GetProcAddress
LocalHandle

ole32

CoCreateGuid
OleDuplicateData
OleCreateStaticFromData
CoLockObjectExternal

user32

VkKeyScanW
CheckRadioButton
DispatchMessageA
ChildWindowFromPoint
GetWindowTextW
SetRectEmpty
FrameRect
AllowSetForegroundWindow
GetThreadDesktop
GetDoubleClickTime
GetLastActivePopup
ShowWindowAsync
SendNotifyMessageW
DefMDIChildProcA
LoadCursorA
NotifyWinEvent
DestroyAcceleratorTable

shlwapi

wnsprintfA

advapi32

InitiateSystemShutdownW
RegSaveKeyW
RegSaveKeyExW
ImpersonateLoggedOnUser
RegEnumValueW
SaferCreateLevel

shell32

ExtractIconA
SHGetSpecialFolderLocation

gdi32

GetBrushOrgEx
CreateHatchBrush
CreateRoundRectRgn
SetMagicColors
GetTextFaceW
AbortPath
PtInRegion
SetRectRgn

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

79fa17429ad3633787fec26712f2c2e9

Headers

File Characteristics

Imports

kernel32

ole32

user32

shlwapi

advapi32

shell32

gdi32

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 64KB - Virtual size: 63KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 64KB - Virtual size: 63KB