b4c7671152524e2aa26984ab64f85d44_JaffaCakes118

General

Target

b4c7671152524e2aa26984ab64f85d44_JaffaCakes118
Size

48KB
MD5

b4c7671152524e2aa26984ab64f85d44
SHA1

e1412813b7f16224c8afc92fa9871f3d47771498
SHA256

5b874689c89219a365784ca39accfe4a5b7fa2a39d0ceb57ab0f4366b10a7886
SHA512

df63cce98d27d684804d899357f8137b5f617ba99685ca279e5e8386b9b6efa596a0d321b45f7d1c41bf34265c9fc6b890f92980efdf2fa980ec4451ff89a639
SSDEEP

768:/yWflTh/JaW4TJaanEDloTJHfs5eHPFLAOfM3f65Wqvfeu7BS4ixidHnV9:jflTFJazT8anrdUQ9Aogf6zvfek0wdHv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4c7671152524e2aa26984ab64f85d44_JaffaCakes118

Files

b4c7671152524e2aa26984ab64f85d44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d841aae054b9c40b9aa094c7eea57f7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
GetCurrentProcess
CreateFileA
SetHandleCount
GetFileType
lstrcpyA
lstrcpynW
GetStringTypeW
SetFilePointer
MultiByteToWideChar
GetStartupInfoA
GetStringTypeA
LCMapStringA
TerminateProcess
GetStdHandle
LCMapStringW
GetVersion
GetOEMCP
lstrcatA
WriteFile
GetCommandLineA
GetCPInfo

user32

DrawIcon
CopyImage
CopyRect
LoadCursorA
GetDC
IsWindow
DialogBoxParamA
DialogBoxParamW
CopyIcon
CreateIcon
DrawTextW
GetFocus
DrawIconEx
CloseWindow
IsMenu
GetCursor
LoadMenuA
GetDlgItem
DrawTextA
GetWindowTextLengthA
EndDialog
InsertMenuA
GetWindowTextA

comctl32

ImageList_LoadImageW
MenuHelp
CreateUpDownControl
CreateToolbarEx
ImageList_GetIconSize
ImageList_AddIcon
ImageList_Copy
DllGetVersion
InitCommonControls
ImageList_DragEnter
DrawStatusText
ImageList_Add

advapi32

RegCreateKeyW
RegCreateKeyExA
RegOpenKeyA
RegSetValueA
RegQueryValueExW
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyW
RegEnumValueA
RegCreateKeyExW
RegDeleteValueW
RegCreateKeyA
RegSetValueW

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 17.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d841aae054b9c40b9aa094c7eea57f7c

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 42KB - Virtual size: 17.5MB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 42KB - Virtual size: 17.5MB