b74eebaa4e92fc33602b6ce7bcae9c9d_JaffaCakes118

General

Target

b74eebaa4e92fc33602b6ce7bcae9c9d_JaffaCakes118
Size

956KB
MD5

b74eebaa4e92fc33602b6ce7bcae9c9d
SHA1

5a80191c60962913cde349a66c481b6e68441a20
SHA256

b92e7d350afa5e565f3f90e2a910f5fb1f667c3b35a7725a35942656ee8ec151
SHA512

a59568a9617603fd5dee66db4ea5c2910c5890c79bd67cf697af96180f2c89cfef2a6c65b52cb83667abb6e4251d83a789cd26054c7a738904302374fcb21815
SSDEEP

24576:MiF/a2T2gMrTKQASst1avVWjtQ4Gjith:XF/T2foH+dWhSMh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b74eebaa4e92fc33602b6ce7bcae9c9d_JaffaCakes118

Files

b74eebaa4e92fc33602b6ce7bcae9c9d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d32392493985f5c0537685a2f396037b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA
Shell_NotifyIconW

advapi32

RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA

msvfw32

DrawDibProfileDisplay
ICRemove

kernel32

GetTickCount
CreateFileA
ExitProcess
CloseHandle
lstrcpynA
ReadFile
LoadLibraryExA
GetModuleHandleA
SetErrorMode
GetVolumeInformationW
lstrcpynW
GetLogicalDrives
lstrlenW
lstrlenA
GlobalAlloc
GetPrivateProfileIntA
FreeLibrary
GetModuleFileNameA
GetEnvironmentVariableA
GetPrivateProfileStringA
SetFilePointer
GetDriveTypeW

shlwapi

PathFileExistsA
StrToIntA

user32

RegisterWindowMessageA
FindWindowA
DestroyIcon
SetForegroundWindow
PostQuitMessage
EnableMenuItem
RegisterClassA
GetCursorPos
LoadStringW
DestroyWindow
DefWindowProcA
SendMessageA
TrackPopupMenu
CharNextW
GetWindowTextW
GetMessageA
LoadImageA
SetMenuDefaultItem
DispatchMessageA
GetAsyncKeyState
CharNextA
CreateWindowExA
DestroyMenu
CreatePopupMenu
InsertMenuItemA
InsertMenuItemW
MessageBoxA

Sections

.text
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 405KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d32392493985f5c0537685a2f396037b

Headers

File Characteristics

Imports

shell32

advapi32

msvfw32

kernel32

shlwapi

user32

Sections

.text Size: 515KB - Virtual size: 515KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 405KB - Virtual size: 3.7MB

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 515KB - Virtual size: 515KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 405KB - Virtual size: 3.7MB

.rsrc
Size: 32KB - Virtual size: 32KB