c05f893244c69c7cc66a305b37fed14d_JaffaCakes118

General

Target

c05f893244c69c7cc66a305b37fed14d_JaffaCakes118
Size

292KB
MD5

c05f893244c69c7cc66a305b37fed14d
SHA1

1e70518531f8b8b536179d3e112a628ea160051d
SHA256

57b36e940b949a1646d5a09f3ea4fe586e6fd1e150fba98267a28ab3862e1020
SHA512

266bd8b8fa24557e5f1861cffddaaa410bdd6a22e5ad3910bf9e98fb61e38222cfd0d2f19aca89fdd0006a1fad545f296c74f1a215b85bef07933e7c7f8a07c6
SSDEEP

6144:l+l8SyJilybDhZGoreyDYvHqhbC8P2iIGOnWFQmUJldFYOWEVrl2G4qE8O:l+l8SyQ0RZ/rpDuKQxDnOjYHmk0wjO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c05f893244c69c7cc66a305b37fed14d_JaffaCakes118

Files

c05f893244c69c7cc66a305b37fed14d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ff4ab2adf0b6b666e1ac599e965fa45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

WindowFromPoint
SetWindowTextA
OpenIcon
ShowWindow
SendDlgItemMessageA
SetWindowPlacement
FindWindowExA
GetWindowThreadProcessId
AdjustWindowRectEx
GetWindowPlacement
CreateDialogParamA
GetDesktopWindow
IsWindowVisible

ole32

CoFreeUnusedLibraries
CoFileTimeNow
MonikerCommonPrefixWith
ReadClassStg
CoTaskMemRealloc
OleQueryLinkFromData
MonikerRelativePathTo
CoReleaseServerProcess
OleDraw
IIDFromString
OleNoteObjectVisible
OleSetClipboard

kernel32

IsBadWritePtr
GetModuleHandleA
SuspendThread
VirtualAlloc
SetEvent
GetExitCodeThread
ReleaseMutex
CloseHandle
ResetEvent
PulseEvent
GetProcAddress
WideCharToMultiByte
GetSystemDefaultLCID
WaitForSingleObject
VirtualUnlock
VirtualProtect
GetLocaleInfoA
GetStartupInfoA
OpenMutexA
GetOverlappedResult
GlobalReAlloc
GetNumberFormatA
GetStringTypeA
HeapReAlloc
GlobalUnlock
OpenEventA

msvcrt

__getmainargs
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_XcptFilter
_acmdln
_exit

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ff4ab2adf0b6b666e1ac599e965fa45

Headers

File Characteristics

Imports

user32

ole32

kernel32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 276KB - Virtual size: 382KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 276KB - Virtual size: 382KB

.rsrc
Size: 3KB - Virtual size: 2KB