c0bda31e493cefa81feaab61bf9e7978_JaffaCakes118

General

Target

c0bda31e493cefa81feaab61bf9e7978_JaffaCakes118
Size

264KB
MD5

c0bda31e493cefa81feaab61bf9e7978
SHA1

436aca30d6b4119343b1cb118ee78072f3d62503
SHA256

f794a875641afabf07a6379502674ef1da5019b3a81e305d6c7e107016264507
SHA512

3a070516af543c5096462ef87a31aaa95674a79606fc054c137b2a746527334310ce93553372663940098d90782617342d77bd5d6354242888386e534dc09d73
SSDEEP

6144:spSf9VjQA7mlfqJ798GSZI7Y24hM4O3j2upzHhgVNO:zVV4+02PTTplgVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0bda31e493cefa81feaab61bf9e7978_JaffaCakes118

Files

c0bda31e493cefa81feaab61bf9e7978_JaffaCakes118
.exe windows:4 windows x86 arch:x86

437afbd88d29d99f4d5b83810742fbd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringW
SetEvent
TerminateThread
WritePrivateProfileStringW
lstrlenW
GetFileSize
GetFileAttributesExW
WriteFile
ExitProcess
FreeLibrary
GlobalUnlock
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
DeleteFileW
GetCurrentProcessId
WideCharToMultiByte
SetThreadPriority
FileTimeToSystemTime
GetModuleFileNameW
SuspendThread
Sleep
GetVersion
CreateWaitableTimerW
GlobalLock
WaitForSingleObject
SetEndOfFile
FindResourceExW
InterlockedDecrement
SetCurrentDirectoryW
GlobalAddAtomW
SizeofResource
GetProcAddress
GetLastError

user32

MessageBoxW
GetWindowDC
SystemParametersInfoW
GetSystemMetrics
IsWindow
TranslateMessage
DrawTextW
SendMessageW
LoadStringW
TrackPopupMenu
SetLayeredWindowAttributes
wsprintfW
FillRect
SetCursorPos
PostMessageW
GetKeyState
GetCursorPos
EndDialog

gdi32

CreateDCW
BitBlt
DeleteObject
GetClipBox
CreateFontIndirectW
CreateSolidBrush
StretchBlt
SetMapMode
GetObjectW
LineTo
CreateCompatibleDC

advapi32

RegCreateKeyExW
InitializeSecurityDescriptor
LookupPrivilegeValueW
RegDeleteValueW
RegQueryValueExW
StartServiceW
LookupAccountSidW

oleaut32

SysFreeString
OleLoadPicture

Sections

.text
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

437afbd88d29d99f4d5b83810742fbd5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

oleaut32

Sections

.text Size: 236KB - Virtual size: 233KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 17KB

.text
Size: 236KB - Virtual size: 233KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 17KB