c24ac9607157a999f2ae384bf827e6d4_JaffaCakes118

General

Target

c24ac9607157a999f2ae384bf827e6d4_JaffaCakes118
Size

413KB
MD5

c24ac9607157a999f2ae384bf827e6d4
SHA1

1b6ae3e843331c77631996295682c74c71e49160
SHA256

8ac71c52265341fb67ffbfaf1473e93fc879a41f7e825c860884befd96304163
SHA512

8a980f8a3f90ea75e839d013dd030c6e26b92455dfcd6e1fddd0b3907a2b551e14fdb5a9528c91addc0ac28485d81480dd434a116a6592f5c31f1f4b7f61ccfc
SSDEEP

12288:Jw1jclCV3Li09zDTBmhSoOga8E+yVCcor:Gpn3g4oOgNEAH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c24ac9607157a999f2ae384bf827e6d4_JaffaCakes118

Files

c24ac9607157a999f2ae384bf827e6d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eeaf29165c226cb7a0c692a278f7ee7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
MoveWindow
PostQuitMessage
DestroyWindow
DialogBoxParamA
DefWindowProcA
SendMessageA
EndDialog
CreateWindowExA
SetFocus
ShowWindow
UpdateWindow

gdi32

SetBkColor
SetTextColor
CreateFontA
CreateSolidBrush

advapi32

SetFileSecurityW

kernel32

QueryPerformanceCounter
HeapSize
GetOEMCP
GetACP
LoadLibraryA
InterlockedExchange
GetTickCount
GetCPInfo
GetLocaleInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
GetLastError
LCMapStringW
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eeaf29165c226cb7a0c692a278f7ee7a

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 386KB - Virtual size: 385KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 386KB - Virtual size: 385KB