bd9dd036f1ce5f96cff3604519fca793_JaffaCakes118

General

Target

bd9dd036f1ce5f96cff3604519fca793_JaffaCakes118
Size

9KB
MD5

bd9dd036f1ce5f96cff3604519fca793
SHA1

6267bec7b2b524e9a57211565415fbe5c3b18cd4
SHA256

d3e806620b4c97367c2fe4e712bb4a76331165526d080c2102ed07a90a1b33dd
SHA512

793120d213a2ed7e0301cfc037448d89593f59d808fe2fb0ef3d39bfa0ee91b6afb615448f9aa2ace26a31adb2d9c9c1a0d0bab511f98d95e699bf4732f308af
SSDEEP

96:bFX3GA7o4bNm54G/StM25NQb5VFoKLW4A2lgpInuot2dloy1Owc5WzUDvbTdP/1t:bFz3Nm5v5VzFSpInuog/ojRWzUDDT/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd9dd036f1ce5f96cff3604519fca793_JaffaCakes118

Files

bd9dd036f1ce5f96cff3604519fca793_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a0feecaee69686c7e79ea55a9698835c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
MoveFileExA
CreateDirectoryA
Sleep
lstrcmpiA
DeleteFileA
FreeLibrary
GetTempFileNameA
GetSystemDirectoryA
GetTempPathA
GetLastError
CreateMutexA
ExitProcess
lstrcatA
GetCurrentProcessId
GetProcAddress
GetCurrentProcess
CancelIo
GetCurrentThreadId
GetStartupInfoA
CreateProcessA
GetCurrentThread
GetTickCount
FindFirstFileA
GetThreadPriority
GetModuleFileNameA
GetShortPathNameA
CreateFileA
GetACP
GetFileInformationByHandle
SetFilePointer
ReadFile
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
GetFileSize

user32

GetCaretBlinkTime
wsprintfA
ClipCursor
GetCapture
GetClipCursor
DestroyCaret
ClientToScreen
SetActiveWindow
GetActiveWindow
GetCursor
GetTopWindow
GetCaretPos

gdi32

StrokeAndFillPath
GdiFlush
BeginPath
EndDoc
UnrealizeObject
CancelDC
AbortDoc
EndPage
FlattenPath
CloseFigure
EndPath
GetColorSpace
GdiGetBatchLimit
GetBkMode
CreateCompatibleBitmap
StrokePath
GetBkColor
GetBrushOrgEx
FillPath
AbortPath
PathToRegion
GdiSetBatchLimit
CreateCompatibleDC
WidenPath
StartPage

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 814B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0feecaee69686c7e79ea55a9698835c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 380B

.reloc Size: 1024B - Virtual size: 814B

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 380B

.reloc
Size: 1024B - Virtual size: 814B