a9f6bba0d2ab2c78df1e7ebe958bf4a6_JaffaCakes118

General

Target

a9f6bba0d2ab2c78df1e7ebe958bf4a6_JaffaCakes118
Size

61KB
MD5

a9f6bba0d2ab2c78df1e7ebe958bf4a6
SHA1

8b2853ae42b2fb81562a6d008aa247299f3bc068
SHA256

2f7daae174252471eaa87c5bcb62b19aef87302f929da9b3e378910fa39ffe66
SHA512

dd78f3b9c510f5ac91395aba97a9f3f2d6d176d5943cc23547ee0d90db671e45faee2e60391ab3b60b58779e3a27470d7dbf5093f9a99ab220b637d8ba4453b6
SSDEEP

1536:jdgYI5qd+P5ORkFmDvxILILBujg0UE8URPiu:jdgYI5qYP5sDJYILCg0UFkPR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9f6bba0d2ab2c78df1e7ebe958bf4a6_JaffaCakes118

Files

a9f6bba0d2ab2c78df1e7ebe958bf4a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ecae2db5499812558cd9e1efb2f5abf4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
GetMenu
CreateDialogParamW
UpdateWindow
DispatchMessageW
SetCursor
GetDlgItemTextW
GetCursorPos
ShowWindow
GetDC
TranslateMessage
GetForegroundWindow
DialogBoxParamW
LoadAcceleratorsW
SetScrollPos

kernel32

ExitProcess
GetModuleHandleW
LoadLibraryA
GetProcAddress
VirtualProtect
GetFileInformationByHandle
LocalFree
lstrcmpiW
lstrcatW
GetCurrentThreadId
GlobalFree
CloseHandle
lstrcpyW
lstrcpynW
GetLocalTime

comctl32

ImageList_Duplicate
FlatSB_GetScrollRange
CreatePropertySheetPage
ImageList_Create
_TrackMouseEvent
DrawStatusTextA
ShowHideMenuCtl
ImageList_GetIcon
ImageList_GetIconSize
CreatePropertySheetPageA
ImageList_LoadImageA
FlatSB_SetScrollProp
ImageList_Draw
CreateStatusWindow
CreateMappedBitmap

Sections

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ecae2db5499812558cd9e1efb2f5abf4

Headers

File Characteristics

Imports

user32

kernel32

comctl32

Sections

.itext Size: 4KB - Virtual size: 4KB

.tls Size: 1024B - Virtual size: 702B

.data Size: 48KB - Virtual size: 83KB

.bss Size: 5KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 760B

.itext
Size: 4KB - Virtual size: 4KB

.tls
Size: 1024B - Virtual size: 702B

.data
Size: 48KB - Virtual size: 83KB

.bss
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 760B