ad1f4fd5825f3163a518c74e9b82cbcd_JaffaCakes118

General

Target

ad1f4fd5825f3163a518c74e9b82cbcd_JaffaCakes118
Size

516KB
MD5

ad1f4fd5825f3163a518c74e9b82cbcd
SHA1

20f12e431b63ad92bf04be3731b20a0358a615e9
SHA256

798c816ef5868092bb1f7feb5afd975eb402de84b10bf0ff020e6d7f3f0b8cc4
SHA512

3f45caba87095c8716fd7dab651a5c8726be2c34cfd4f8317cbc83ff781b32dc83af6f9144c47475c48b4fdbef6f954f599fff4eac51c1d12a789ef68e42c536
SSDEEP

12288:Z2JcoeoedRhHIVq9/Yt2Qk0W49kmPegtx6gtSPFCG:ZAedRrIRWE206gtWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad1f4fd5825f3163a518c74e9b82cbcd_JaffaCakes118

Files

ad1f4fd5825f3163a518c74e9b82cbcd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2dbe144593f4833a8b1236540a1db536

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
GetParent
EndDialog
MoveWindow
ShowWindow
DefWindowProcA
SetWindowPos
GetWindowRect
DispatchMessageA
EnableWindow
ReleaseCapture
GetSysColor
GetCursorPos
SystemParametersInfoA
SetTimer
RegisterClassA
InvalidateRect
CreateWindowExA
LoadCursorA
CallWindowProcA
GetFocus
SetCursor

gdi32

SetTextColor

kernel32

QueryPerformanceCounter
HeapDestroy
HeapAlloc
GetVersionExA
GetModuleFileNameA
Sleep
LeaveCriticalSection
FileTimeToLocalFileTime
GetCommandLineA
GetProcAddress
GetSystemInfo
CreateMutexA
CompareStringW
RaiseException
GetModuleHandleA
GetProcessHeap
GetLastError
EnterCriticalSection
SetStdHandle
SetEnvironmentVariableA
FileTimeToSystemTime
SetLastError
GetStartupInfoA
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
CreateEventA
VirtualFree
VirtualQuery
HeapCreate
GetModuleHandleW
TerminateProcess
FindClose
GetSystemTimeAsFileTime
CloseHandle
WriteFile
InterlockedExchange
SetHandleCount

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strcmpi

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dbe144593f4833a8b1236540a1db536

Headers

File Characteristics

Imports

user32

gdi32

kernel32

msvcrt

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 484KB - Virtual size: 483KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 484KB - Virtual size: 483KB

.rsrc
Size: 4KB - Virtual size: 1KB