bd694d856aec25c19cff09cb4c94a831_JaffaCakes118

General

Target

bd694d856aec25c19cff09cb4c94a831_JaffaCakes118
Size

95KB
MD5

bd694d856aec25c19cff09cb4c94a831
SHA1

875ed6dd5d7ea261282c5a1fc111d2c3b534bc67
SHA256

77af88c6748f9677a50c27aae16ac98c4bdae3fe0d3c287634ec98eead968ceb
SHA512

c87cf848fc5e73124e73dbb32d95abb3d410df1faffd538ac3c8129bd1182386ce7fc2e9588eea88a56d02ac81b8c237a695baaa32c169d96a00f152e69383f3
SSDEEP

1536:r2vMx33rc2IEwD/F2lznQtWuIuBhQB+cKtNWRGeq5frduwyp69RcePF:6vi33fRE92xnQtWuIyaBI5t5frduXYTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd694d856aec25c19cff09cb4c94a831_JaffaCakes118

Files

bd694d856aec25c19cff09cb4c94a831_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5689d26d20351e4a88dfa7d01d905c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
lstrcatA
Sleep
GetStdHandle
CloseHandle
HeapFree
GetCPInfo
SetLastError
lstrcpynA
HeapAlloc
GetFileType
lstrcpyA
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetLocalTime
GetFileSize

comctl32

ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_DragShowNolock
ImageList_Replace
ImageList_GetIcon
ImageList_DragEnter
ImageList_Create
ImageList_AddMasked
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_LoadImage
ImageList_Copy
ImageList_GetImageRect
ImageList_DrawEx
ImageList_Destroy
ImageList_LoadImageW
ImageList_Draw

advapi32

RegLoadKeyA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyExW
RegReplaceKeyA
RegQueryValueExA
RegEnumKeyA
RegDeleteValueA
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegDeleteValueW
RegCreateKeyW
RegLoadKeyW

user32

CalcMenuBar
DrawTextA
DialogBoxParamW
CloseWindow
DrawIconEx
DialogBoxParamA
GetWindowTextA
CopyRect
LoadCursorA
GetMenu
CopyIcon
GetCursor
IsWindow
DrawTextW
CreateIcon
GetDlgItem
AlignRects
GetDC

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ddata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.resr
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5689d26d20351e4a88dfa7d01d905c2

Headers

File Characteristics

Imports

kernel32

comctl32

advapi32

user32

Sections

.text Size: 9KB - Virtual size: 9KB

.ddata Size: 24KB - Virtual size: 24KB

.odata Size: 4KB - Virtual size: 12KB

.reloc Size: - Virtual size: 3KB

.resr Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.ddata
Size: 24KB - Virtual size: 24KB

.odata
Size: 4KB - Virtual size: 12KB

.reloc
Size: - Virtual size: 3KB

.resr
Size: 2KB - Virtual size: 1KB