af3f345a01bc040a42e17124f3c3ea1e_JaffaCakes118

General

Target

af3f345a01bc040a42e17124f3c3ea1e_JaffaCakes118
Size

272KB
MD5

af3f345a01bc040a42e17124f3c3ea1e
SHA1

2d838597c4a7433c620f955fd09cf3ef49fb830f
SHA256

99aa22ea0a3e36b6ce1c9b5485fd40787abf2c3a5f7765eb120dc49d0a00f559
SHA512

5d98784113ee04993a3e64ed8db1b50bfed6f9e7e91099deb7456b27eebc04d3c0a53c763f3892a38ff8282e8659d1ed51ddf957027e966c1741170b5f5ed305
SSDEEP

6144:zLn68NnymS3b6n9jHYGhl2YLfh7t2oisAzE:vnRNno69jHYGhwyBth2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af3f345a01bc040a42e17124f3c3ea1e_JaffaCakes118

Files

af3f345a01bc040a42e17124f3c3ea1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b4d6b633454eacd8f020601ca620abc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CallNamedPipeW
DisconnectNamedPipe
ExitProcess
FindFirstChangeNotificationW
FindFirstFileExW
GetDriveTypeW
GlobalAddAtomW
Heap32Next
InterlockedDecrement
IsBadReadPtr
LocalFree
OutputDebugStringW
ReadConsoleOutputAttribute
SearchPathA
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetFileApisToOEM
SetThreadPriorityBoost
SleepEx
UTUnRegister
WaitForSingleObject
lstrcmpA

user32

DdeAbandonTransaction
DdeImpersonateClient
DefWindowProcW
EnumDisplayDevicesW
GetActiveWindow
GetClipCursor
GetIconInfo
GetKeyboardLayoutNameW
GetListBoxInfo
GetMenuContextHelpId
GetMessageTime
GetWindowTextW
InternalGetWindowText
IsCharAlphaNumericW
IsCharLowerW
IsIconic
RegisterDeviceNotificationW
RemovePropW
SetMenuInfo
SetMenuItemBitmaps
SetSysColors
SetWinEventHook
SetWindowRgn
WinHelpW

gdi32

CloseMetaFile
CopyEnhMetaFileA
CopyMetaFileA
CreateEnhMetaFileA
CreatePatternBrush
DeleteEnhMetaFile
DeviceCapabilitiesExW
Ellipse
EndDoc
GdiComment
GetColorAdjustment
GetEnhMetaFileA
GetICMProfileA
GetNearestPaletteIndex
GetSystemPaletteEntries
GetTextCharacterExtra
OffsetWindowOrgEx
PlayMetaFile
PolyBezierTo
ResetDCW
SaveDC
SetWorldTransform

Sections

.text
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b4d6b633454eacd8f020601ca620abc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 512B - Virtual size: 20KB

.data Size: 268KB - Virtual size: 272KB

.rdata Size: - Virtual size: 16KB

.rsrc Size: 2KB - Virtual size: 496KB

.text
Size: 512B - Virtual size: 20KB

.data
Size: 268KB - Virtual size: 272KB

.rdata
Size: - Virtual size: 16KB

.rsrc
Size: 2KB - Virtual size: 496KB