b78b302aac98c66885b7cc10bf286600_JaffaCakes118

General

Target

b78b302aac98c66885b7cc10bf286600_JaffaCakes118
Size

380KB
MD5

b78b302aac98c66885b7cc10bf286600
SHA1

3f81186a9e4511d0d778586a14a2ad9b0e3c3e4d
SHA256

6985b8715be9f43afae65f6d33995c82851eeea2e4984ddda37d4202bf96d3d0
SHA512

6babcec41516eb3e590c52e67987f6f439af49f4839df061b39c21b34597bec9340eb5d27f9c7f7bcecaa62d64cb354bcb550a030f1c1ad5e4e1719fe54f2072
SSDEEP

6144:5mHDfkY+WR6Tj2KAr1tQrGlEzIwS1+o3V4zRkOzjQ5Fc7hPJ+q9hhx:8jDgfwKiKIw8/3VSVXKe7BQ63x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b78b302aac98c66885b7cc10bf286600_JaffaCakes118

Files

b78b302aac98c66885b7cc10bf286600_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2ebb11f21d850faae12d612ba24a37f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
DialogBoxIndirectParamA
CreatePopupMenu
GetSysColorBrush
GetForegroundWindow
CreateDialogIndirectParamA
GetWindowThreadProcessId
GetClientRect
IntersectRect
ExitWindowsEx
EndDeferWindowPos
InflateRect

kernel32

TerminateProcess
SetEndOfFile
ReadFile
CreateEventA
FileTimeToLocalFileTime
GetVersion
InterlockedExchange
GetVolumeInformationA
InitializeCriticalSection
EnterCriticalSection
GetComputerNameA
SetSystemTimeAdjustment
VirtualProtectEx
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetLastError
SetFilePointer
HeapFree
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d2ebb11f21d850faae12d612ba24a37f

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 140KB - Virtual size: 136KB

.data Size: 200KB - Virtual size: 1.1MB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 140KB - Virtual size: 136KB

.data
Size: 200KB - Virtual size: 1.1MB

.reloc
Size: 8KB - Virtual size: 6KB