b0d6b988f4720579701d1bff787983e3_JaffaCakes118

General

Target

b0d6b988f4720579701d1bff787983e3_JaffaCakes118
Size

3.7MB
MD5

b0d6b988f4720579701d1bff787983e3
SHA1

2f34727486be0ef3e92fe8478db219c87b06e2ce
SHA256

9a2c7c8d0706e82db39168097a95e38eb8a6525d850df678a7ccafe94a52289f
SHA512

d1fc5090dbd5c04d28df8ae58da016d0a8acf939798f87b7cb2ff4554e3d059ee4941d006a9083a9585e4addbc08cbc077c5c3c021380aa345c315d7d954ded3
SSDEEP

98304:RXQyt3aaiyvIZWRCToBy1/+WDCZcSUuOETFH:VqaSx/dDmcNRCV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0d6b988f4720579701d1bff787983e3_JaffaCakes118

Files

b0d6b988f4720579701d1bff787983e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7bb63133a8ec8f7dded392a4011f322f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ValidateRect
SetWindowRgn
EnumDisplaySettingsExA
MonitorFromWindow
GetSysColorBrush
SwapMouseButton
SetDlgItemTextW
CreateMenu
CharToOemBuffA
GetDesktopWindow
GetWindowThreadProcessId
GrayStringA
LoadCursorFromFileW
GetScrollInfo
SetCaretBlinkTime
IsDialogMessageW
FillRect
GetActiveWindow
GetMenu
GetCapture
CharToOemA
SystemParametersInfoW
InsertMenuA
EnumDesktopWindows
GetWindowTextLengthW
ClipCursor
GetWindowPlacement
GetMenuInfo

kernel32

DeleteCriticalSection
SetConsoleActiveScreenBuffer
GetFullPathNameA
EnumCalendarInfoW
SetThreadLocale
FreeResource
SetConsoleTitleA
WritePrivateProfileStringW
LoadResource
ExitProcess
FlushFileBuffers
SetMailslotInfo
VirtualLock
CreateProcessA
GetOverlappedResult
DosDateTimeToFileTime
SizeofResource
GetProfileIntA
RemoveDirectoryA

advapi32

RegOpenKeyExW
AllocateLocallyUniqueId
EnumServicesStatusW
CryptGetUserKey
RegEnumValueW
BuildTrusteeWithNameW
RegReplaceKeyW
SetNamedSecurityInfoA
StartServiceW
MakeAbsoluteSD
AddAccessAllowedAce
RegDeleteValueW
EqualSid
RegDeleteValueA
RegOpenKeyW
CryptDestroyKey
SetEntriesInAclA
GetUserNameA

Sections

.text
Size: 4KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bb63133a8ec8f7dded392a4011f322f

Headers

File Characteristics

Imports

user32

kernel32

advapi32

Sections

.text Size: 4KB - Virtual size: 223KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 3.4MB - Virtual size: 3.4MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 4KB - Virtual size: 223KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 3.4MB - Virtual size: 3.4MB

.rsrc
Size: 19KB - Virtual size: 18KB