a9cf0f6ea67ccd9f3df02d886b3842bc_JaffaCakes118

General

Target

a9cf0f6ea67ccd9f3df02d886b3842bc_JaffaCakes118
Size

337KB
MD5

a9cf0f6ea67ccd9f3df02d886b3842bc
SHA1

362cd591c020eae9c7fb1634abffeb803e186f59
SHA256

d69658bab410006d86f7d31724d755db4eae45dc440c869c189c78ec01021f25
SHA512

de323ae47b5299a684540d8ee75a4b05cc3ec214df546f26a426ea64056556412d6b34c0caa10fc76999281063f4a69575f29d99222fc55ae919f26c7ef292f4
SSDEEP

6144:6yZkSDlVkD4mYkU+c5LXXqi8wJ8s3IR7s2HZe/s2vhBIIzb:6yZkSDlA4mUzXXb/Jr4NzZohBnzb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9cf0f6ea67ccd9f3df02d886b3842bc_JaffaCakes118

Files

a9cf0f6ea67ccd9f3df02d886b3842bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbb50afd96c99986f86bbbefdc8ea480

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TabbedTextOutA
BlockInput
DialogBoxIndirectParamW
PostMessageW
RegisterDeviceNotificationW
FindWindowExA
AnyPopup

kernel32

SetSystemPowerState
TlsFree
WaitNamedPipeW
PostQueuedCompletionStatus
GetTempPathW
EnumLanguageGroupLocalesA
GetComputerNameW
SwitchToThread

comctl32

ImageList_Create
ImageList_GetImageInfo
CreatePropertySheetPageW
ImageList_Write
ImageList_Duplicate
ImageList_LoadImageW
ImageList_AddIcon

ntdll

sprintf
NtSetVolumeInformationFile
RtlUnlockHeap
NtSetContextThread
RtlFindLongestRunClear
ZwQuerySymbolicLinkObject
NtWaitForSingleObject
NtNotifyChangeDirectoryFile

ole32

CoIsHandlerConnected
OleCreateLinkFromData
CoGetCancelObject
CLIPFORMAT_UserSize
CoGetClassVersion
CoQueryClientBlanket

msvcrt

_execlp
_wmktemp
_yn
difftime
_splitpath
__crtCompareStringA

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

bU7SdJZ3
Size: 296KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbb50afd96c99986f86bbbefdc8ea480

Headers

File Characteristics

Imports

user32

kernel32

comctl32

ntdll

ole32

msvcrt

Sections

.text Size: 28KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 28KB

.rsrc Size: 8KB - Virtual size: 12KB

bU7SdJZ3 Size: 296KB - Virtual size: 300KB

.text
Size: 28KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 28KB

.rsrc
Size: 8KB - Virtual size: 12KB

bU7SdJZ3
Size: 296KB - Virtual size: 300KB