bd3c8036e382d7bc076aacf0061b25bd_JaffaCakes118

General

Target

bd3c8036e382d7bc076aacf0061b25bd_JaffaCakes118
Size

148KB
MD5

bd3c8036e382d7bc076aacf0061b25bd
SHA1

a5238d4723f734b42863086b970400da3a093a8d
SHA256

801d3470e69224eef90f2fbd85fc3512943566ee45984775d245e1218c988606
SHA512

90a7841868d617b81388c4c55504f875b522a7f20ded3b1ad151ebb8afb13fb593162fcb423589cb1080279bbab71cd197c053f469c417b659c6512a0efac99a
SSDEEP

1536:5ymmON2JSy0qe13Lh9AsjrQl11OwLZ7z2KkhbGByAPSXalVysRvq+YxSRRaFx8:BmON2Yy3ahdjr2OwL9ztk0njOLQRGx8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd3c8036e382d7bc076aacf0061b25bd_JaffaCakes118

Files

bd3c8036e382d7bc076aacf0061b25bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5d08b7a83b79640dd35f0ba19091733

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetLastError
GetOEMCP
GetACP
IsBadReadPtr
GetModuleHandleW
ExitProcess
GetCommandLineA
ExitThread
LoadLibraryExA
GetProcAddress
LoadLibraryA
GetModuleHandleA

user32

DestroyIcon
CallNextHookEx
ClientToScreen
CharLowerA
DefMDIChildProcA
DeleteMenu
DestroyMenu
CreatePopupMenu
CloseClipboard
DispatchMessageW
DispatchMessageA
CreateMenu
DefFrameProcA
DrawFrameControl
CheckMenuItem
CharUpperBuffA
CharNextA
DefWindowProcA
DestroyWindow
CharToOemA
ChildWindowFromPoint
DrawIcon
CallWindowProcA
AdjustWindowRectEx
CharLowerBuffA
CharNextW
DestroyCursor
DrawEdge
CreateIcon
BeginPaint

advapi32

RegCreateKeyA
RegLoadKeyA

Sections

CODE
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5d08b7a83b79640dd35f0ba19091733

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

CODE Size: 108KB - Virtual size: 106KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 4KB

.bss Size: 4KB - Virtual size: 248B

.ddata Size: 8KB - Virtual size: 6KB

.rsrc Size: 12KB - Virtual size: 8KB

CODE
Size: 108KB - Virtual size: 106KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 4KB

.bss
Size: 4KB - Virtual size: 248B

.ddata
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 12KB - Virtual size: 8KB