baf70a5118b894c6b9eaeeef92a78878_JaffaCakes118

General

Target

baf70a5118b894c6b9eaeeef92a78878_JaffaCakes118
Size

48KB
MD5

baf70a5118b894c6b9eaeeef92a78878
SHA1

e2d5efa8d8bc3dcb6bf5029fce3c6e56e19eb681
SHA256

f01b7e3f24f9cf4ab80e82fbdd086f19c81e2970d028df7126c7d04a8b26f572
SHA512

a34416f0e5c10a17d2a1058d522238496e009268b4f379f75f06d6a74d133ae78f150d8b68125287daf032808e9c1dc2abf94fb9b6870071512606d8dd016b54
SSDEEP

768:WTW3Y/yi4TEKXUaHtu36Oh2bnj80/yuVsA7ilrs:PIPdKXUaNy6OSw0/y22lr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baf70a5118b894c6b9eaeeef92a78878_JaffaCakes118

Files

baf70a5118b894c6b9eaeeef92a78878_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be3b8973fe1bb7adad6872c041e5056d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCommandLineA
GetPrivateProfileStringA
GetWindowsDirectoryA
HeapSize
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FlushFileBuffers
GetModuleFileNameA
GetStringTypeA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
SetFilePointer
HeapAlloc
LocalAlloc
GetVersionExA
lstrcmpiA
CreateThread
ExitThread
GetStringTypeW
Sleep
GetLastError
MoveFileA
GetModuleHandleA
GetStartupInfoA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LCMapStringA
MultiByteToWideChar
LCMapStringW
CloseHandle

user32

FindWindowA
IsWindow
PostMessageA
RegisterClassA
CreateWindowExA
ShowWindow
GetMessageA
DispatchMessageA
TranslateMessage
PostQuitMessage
DefWindowProcA
EnumWindows
keybd_event
SetForegroundWindow
EnumChildWindows
SendMessageA
GetWindowTextA
GetClassNameA
GetParent
GetWindowLongA

advapi32

RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

be3b8973fe1bb7adad6872c041e5056d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 34KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 34KB