c7c78d1c72b8538b539f6a1c9c835718_JaffaCakes118

General

Target

c7c78d1c72b8538b539f6a1c9c835718_JaffaCakes118
Size

88KB
MD5

c7c78d1c72b8538b539f6a1c9c835718
SHA1

9df87c6ac417be6b9f30af8e2037439d24882b3a
SHA256

3344aeddfae06dfb8df27714abafe7ed5a18c270e7796558c0e6ce70fec6d0b3
SHA512

28154c16eaa10c2d77e36c20457b07a40ec40a16ad43f206ec7ad4d65c6ef13a7621732f702961464abb8cbd5bfd87f13924929c018351638ac2047b236d0ddf
SSDEEP

1536:15lL5K4Gcy02cdlRLP0wT9y6boIWhJoj9yKxisoKuNcH3Go6GD:1TkAv/P0761Q+j9yKxVoZeflD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7c78d1c72b8538b539f6a1c9c835718_JaffaCakes118

Files

c7c78d1c72b8538b539f6a1c9c835718_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fba4ddcb248a65db63666555a1c9dbb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ChooseColorA
ChooseColorW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
dwOKSubclass
WantArrows
GetOpenFileNameA
GetOpenFileNameW
LoadAlterBitmap
PrintDlgA
ReplaceTextW

user32

DialogBoxParamA
EnumWindows
GetDesktopWindow
GetUserObjectSecurity
ScreenToClient
SendMessageA

kernel32

HeapCreate
GetDevicePowerState
GetCommandLineA
GetACP
ExpandEnvironmentStringsA
ExitProcess
EnumSystemLocalesW
EnumLanguageGroupLocalesW
CreateWaitableTimerW
CloseHandle
CallNamedPipeW
GetModuleHandleA
SetSystemPowerState
SetComputerNameA
RtlMoveMemory
LCMapStringA
GetStartupInfoA
HeapAlloc
GetVersionExA
GetLogicalDrives

ole32

StringFromGUID2
CoCreateInstance
CLSIDFromString

dbghelp

FindDebugInfoFileEx
ImageNtHeader
ImageRvaToVa
MapDebugInformation
SymEnumSourceFiles
SymFromAddr
SymGetLineFromAddr64
SymGetLinePrev64
SymGetSymFromAddr
SymGetSymPrev
SymGetTypeFromName
SymMatchString
SymSetOptions
UnmapDebugInformation
ImageDirectoryEntryToData

comctl32

CreateStatusWindowA
DestroyPropertySheetPage
DrawInsert
FlatSB_SetScrollInfo
ImageList_DrawEx
ImageList_GetBkColor
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_Merge
ImageList_SetFilter
UninitializeFlatSB

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fba4ddcb248a65db63666555a1c9dbb

Headers

File Characteristics

Imports

comdlg32

user32

kernel32

ole32

dbghelp

comctl32

Sections

.text Size: 48KB - Virtual size: 47KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 48KB - Virtual size: 47KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB