c76a974d017998ec62edc2a7ce36eb76_JaffaCakes118

General

Target

c76a974d017998ec62edc2a7ce36eb76_JaffaCakes118
Size

273KB
MD5

c76a974d017998ec62edc2a7ce36eb76
SHA1

d94fe8b1f323981cdd62e0d3af4928138a838944
SHA256

76c44a067122c69ca22e219271b935914061fa1bae83b244deb4141df908a1f0
SHA512

a453aa0de3fecacf9bafaf37713d4f0de3a9c5e6d9bab8f83bc7af6ce3c98602aa09cd97c75b62cd3ce156ce27199fe1a7f4c1a42be30524fe655f180f6dddc3
SSDEEP

6144:9zNsEmUjBhTl3W9q7bkFhXpj8JbIg/WqP/24672UPSspb:9ZsEmsBFi5jybIg/WAHAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c76a974d017998ec62edc2a7ce36eb76_JaffaCakes118

Files

c76a974d017998ec62edc2a7ce36eb76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e556c3f7a51fdd7c6ea6fb6973fb8cc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SuspendThread
VirtualFree
GetLogicalDrives
QueryDosDeviceW
SetWaitableTimer
GetFileSize
SetCurrentDirectoryW
LoadLibraryW
SetLastError
ExitProcess
SetEndOfFile
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualAlloc
VirtualProtect
Sleep
SetThreadPriority
LockResource
MulDiv
GlobalDeleteAtom
lstrlenW
GetModuleHandleW
GlobalAddAtomW
GetCurrentProcessId
GetFileAttributesExW
GlobalLock
FreeLibrary
InterlockedDecrement

user32

CreatePopupMenu
UpdateWindow
SetCapture
GetWindowTextW
GetParent
RegisterHotKey
DispatchMessageW
WindowFromPoint
IsDlgButtonChecked
TrackPopupMenu
OffsetRect
RedrawWindow
LoadBitmapW
RegisterWindowMessageW
SystemParametersInfoW
SetForegroundWindow
VkKeyScanW

gdi32

CreateICW
CreateBitmap
CreateCompatibleBitmap
GetClipBox
SetTextColor
GetStockObject
DPtoLP

advapi32

LookupPrivilegeValueW
RegDeleteValueW
InitializeSecurityDescriptor
RegCreateKeyExW

shell32

Shell_NotifyIconW

ole32

CoUninitialize
CoInitializeEx

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e556c3f7a51fdd7c6ea6fb6973fb8cc1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 24KB - Virtual size: 23KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 24KB - Virtual size: 23KB