b7fd0a2ea893f68c27a9db558ca9806f_JaffaCakes118

General

Target

b7fd0a2ea893f68c27a9db558ca9806f_JaffaCakes118
Size

3.7MB
MD5

b7fd0a2ea893f68c27a9db558ca9806f
SHA1

57f94a3715b74df3eb2a7264817f9968802e2f39
SHA256

1180a3f11d702320015a2354e9064e853eb07338eee92a5c1fdb0e653f257176
SHA512

6ea4cd3d3383c2b5ae00c4882902027c02149080d75c2d2a72c87a09081ea8194d2eb59e009691f432d3a77cd1e00495152045c3aa8d3ef8b7ea7a69b1366d07
SSDEEP

98304:RXQyt3aaiyvIZWRCToBy1/+WDCZcSUuOE0VuD1:VqaSx/dDmcNRnVs1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7fd0a2ea893f68c27a9db558ca9806f_JaffaCakes118

Files

b7fd0a2ea893f68c27a9db558ca9806f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7bb63133a8ec8f7dded392a4011f322f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ValidateRect
SetWindowRgn
EnumDisplaySettingsExA
MonitorFromWindow
GetSysColorBrush
SwapMouseButton
SetDlgItemTextW
CreateMenu
CharToOemBuffA
GetDesktopWindow
GetWindowThreadProcessId
GrayStringA
LoadCursorFromFileW
GetScrollInfo
SetCaretBlinkTime
IsDialogMessageW
FillRect
GetActiveWindow
GetMenu
GetCapture
CharToOemA
SystemParametersInfoW
InsertMenuA
EnumDesktopWindows
GetWindowTextLengthW
ClipCursor
GetWindowPlacement
GetMenuInfo

kernel32

DeleteCriticalSection
SetConsoleActiveScreenBuffer
GetFullPathNameA
EnumCalendarInfoW
SetThreadLocale
FreeResource
SetConsoleTitleA
WritePrivateProfileStringW
LoadResource
ExitProcess
FlushFileBuffers
SetMailslotInfo
VirtualLock
CreateProcessA
GetOverlappedResult
DosDateTimeToFileTime
SizeofResource
GetProfileIntA
RemoveDirectoryA

advapi32

RegOpenKeyExW
AllocateLocallyUniqueId
EnumServicesStatusW
CryptGetUserKey
RegEnumValueW
BuildTrusteeWithNameW
RegReplaceKeyW
SetNamedSecurityInfoA
StartServiceW
MakeAbsoluteSD
AddAccessAllowedAce
RegDeleteValueW
EqualSid
RegDeleteValueA
RegOpenKeyW
CryptDestroyKey
SetEntriesInAclA
GetUserNameA

Sections

.text
Size: 4KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bb63133a8ec8f7dded392a4011f322f

Headers

File Characteristics

Imports

user32

kernel32

advapi32

Sections

.text Size: 4KB - Virtual size: 223KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 3.4MB - Virtual size: 3.4MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 4KB - Virtual size: 223KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 3.4MB - Virtual size: 3.4MB

.rsrc
Size: 19KB - Virtual size: 18KB