a8b5a60ecbcd7e98fa1de0ca414d1bd3_JaffaCakes118

General

Target

a8b5a60ecbcd7e98fa1de0ca414d1bd3_JaffaCakes118
Size

81KB
MD5

a8b5a60ecbcd7e98fa1de0ca414d1bd3
SHA1

9776540a746b8a82652d1782fbeefb48db78ecb7
SHA256

5ef34284567da472f492055217c3b3f7566cbb4fa3e73f733566aee2a8cbd500
SHA512

8bffe7775d2b18dde83cbf96e063c13c5924219294817123f3bc0abaa397da751fa9b937410e72a7153a0369a494014c8aa5b6c8fb2e1f6857adbf4f813db716
SSDEEP

1536:QCHUnkLEgK8s4XaEF0FV41+HCaNhDnS7n8LeEEPyRcUH9KKxipVe1Lmsm:QC0nSajo+HCChDPeEEvUdKaAe1Lm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8b5a60ecbcd7e98fa1de0ca414d1bd3_JaffaCakes118

Files

a8b5a60ecbcd7e98fa1de0ca414d1bd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a0650aef10f528eddeef740679f884d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegCreateKeyExW

ole32

CoGetMalloc
CoCreateGuid
CoCreateInstance

msvcrt

exit
realloc
_except_handler3
_beginthread
swprintf
wcscmp
__dllonexit
wcscpy
_ftol
_beep
calloc
_chdir
free
malloc
wcscat
wcsncat
__CxxFrameHandler
_itow
_onexit
_adjust_fdiv
_purecall
srand
rand
wcslen
time
_snwprintf

avifil32

AVIFileInfo

user32

SetWindowTextW
SendMessageA
GetParent
SetWindowTextA
GetDlgItem
EndDialog
DialogBoxParamA
MoveWindow
GetWindowLongA
GetWindowRect
GetSystemMetrics
GetWindowTextW
GetWindowTextA
SetWindowLongA
GetDesktopWindow

kernel32

WideCharToMultiByte
FreeLibrary
GetModuleFileNameA
VirtualAlloc
EnterCriticalSection
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetProcAddress
LoadLibraryA
DeleteCriticalSection

Sections

.textbss
Size: - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7a0650aef10f528eddeef740679f884d

Headers

File Characteristics

Imports

advapi32

ole32

msvcrt

avifil32

user32

kernel32

Sections

.textbss Size: - Virtual size: 448KB

.text Size: 512B - Virtual size: 480B

.idata Size: 80KB - Virtual size: 80KB

.textbss
Size: - Virtual size: 448KB

.text
Size: 512B - Virtual size: 480B

.idata
Size: 80KB - Virtual size: 80KB