bf89eacdfacda840c371d43e624e703d_JaffaCakes118

General

Target

bf89eacdfacda840c371d43e624e703d_JaffaCakes118
Size

93KB
MD5

bf89eacdfacda840c371d43e624e703d
SHA1

f5b646a3957d616d32219715e424bf279f37b16d
SHA256

29823df3bc74eeb286b9d003adf16e28dbbfda6484f18107a0af0d42fce4b4e5
SHA512

17d6a527ad9b7d6ffc4069a8d1c7ada313f82d249d21dedc0aabb6cc21265f121c135f3aaf71a93b304b358bb7caac1f6069ccae0dedadee6e5c4668441a874f
SSDEEP

1536:La+9lpzeG2izx0856cLXV5+lP5PRLT36srT27RP:Ll9HeFVcylP5PdOI27

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf89eacdfacda840c371d43e624e703d_JaffaCakes118

Files

bf89eacdfacda840c371d43e624e703d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b95349f4e369eae67e9798a3abe5f2cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateDIBitmap
DeleteDC
GetBitmapBits
CreateCompatibleDC
GetPixel
GetCurrentPositionEx
CreateBrushIndirect
GetClipBox
GetDCOrgEx
CreatePalette
CreateSolidBrush
CreatePenIndirect
CreateDIBSection
ExcludeClipRect
DeleteObject
GetBrushOrgEx
ExtTextOutA
CreateHalftonePalette
GetPixel
CreateCompatibleBitmap
RestoreDC
CreateFontIndirectA
SetTextColor
CreateBitmap

kernel32

GetLastError
GetConsoleMode
GetStdHandle
FindAtomA
OpenFileMappingA
WriteFile
GetComputerNameA
GetFileTime
CreateThread
ReadConsoleA
FindFirstFileA
GetCommandLineA
SetLastError
GetFileSize
GetCPInfo
DeleteFileA
Sleep
GlobalFree
OpenFile
DeleteFileW
DeleteAtom
ReadFile
ExitThread
CreateProcessA

comctl32

DrawStatusText
ImageList_Draw
InitCommonControls
CreateStatusWindow
ImageList_DragEnter
DrawStatusTextW
ImageList_Create
MenuHelp
ImageList_LoadImageW
ImageList_Copy
CreateToolbarEx
ImageList_AddIcon
ImageList_EndDrag
ImageList_Destroy
ImageList_GetIcon
CreateStatusWindowW
DllGetVersion
CreateUpDownControl
ImageList_DrawEx
CreateToolbar
ImageList_GetIconSize
CreateMappedBitmap
ImageList_Add
ImageList_LoadImageA

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 28.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b95349f4e369eae67e9798a3abe5f2cc

Headers

File Characteristics

Imports

gdi32

kernel32

comctl32

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 57KB - Virtual size: 56KB

.tls Size: 2KB - Virtual size: 28.7MB

.rdata Size: 4KB - Virtual size: 5KB

.idata Size: 3KB - Virtual size: 2KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 57KB - Virtual size: 56KB

.tls
Size: 2KB - Virtual size: 28.7MB

.rdata
Size: 4KB - Virtual size: 5KB

.idata
Size: 3KB - Virtual size: 2KB