c8f3b5c3b3c56365c118a153aabcadd3_JaffaCakes118

General

Target

c8f3b5c3b3c56365c118a153aabcadd3_JaffaCakes118
Size

777KB
MD5

c8f3b5c3b3c56365c118a153aabcadd3
SHA1

03fa5ff8cbe3f0abb0e2d6add32ba8496b96c6a3
SHA256

90cc82ae23fe7b94f4fbf1b3bcbde02b27344f565b7138ab994bce285efeaa3d
SHA512

ec89fbe3c87aa432100b505388a95ee4df34e66ea3f49fb34f5f6e76565a25c79bba4b84ae2afcb86fd0821f8d84b13cf939ed0e65a82b2fe022d56e8da5d8db
SSDEEP

24576:0LhTPfCq8SImnXHeVYGZoCVcUBJlrhbRwcS:0xCYImnXeaGrLRJez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8f3b5c3b3c56365c118a153aabcadd3_JaffaCakes118

Files

c8f3b5c3b3c56365c118a153aabcadd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c3c0fb5b36e358b421981aec89a0729

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsDlgButtonChecked
DrawMenuBar
ReleaseDC
SetFocus
IsDialogMessageW
CreateIconIndirect
GetSysColorBrush
GetWindowTextW
IsWindowVisible
SetClassLongW
LoadMenuW
CheckMenuItem
UnionRect

msvcrt

strcmp
tolower
_wcsnicmp
strchr
_waccess
time
_splitpath
wcschr
_vsnwprintf
wcsncpy
wcscat
strcat
exit

ulib

??0CONT_MEM@@QAE@XZ
?SetDataBits@COMM_DEVICE@@QAEEK@Z
?DisableLineMode@KEYBOARD@@QAEEXZ
??0KEYBOARD@@QAE@XZ
?Usage@PROGRAM@@UBEXXZ
?IsSameObject@OBJECT@@QBEEPBV1@@Z
?Initialize@MEM_BLOCK_MGR@@QAEEKK@Z
?Initialize@ARRAY@@QAEEKK@Z
?Initialize@PATH@@QAEEPBGE@Z
?Initialize@MEM_ALLOCATOR@@QAEE_KK@Z
?Strcmpis@MBSTR@@SGHPAD0@Z
?IsCorrectVersion@SYSTEM@@SGEXZ
?Initialize@MESSAGE@@QAEEXZ
?SetOutputCodePage@SCREEN@@QAEEK@Z
?Stricmp@MBSTR@@SGHPAD0@Z
?Initialize@LIST@@QAEEXZ
??OWSTRING@@QBEEABV0@@Z

kernel32

GetTickCount
VirtualAlloc
CloseHandle
VirtualFree
CreateFileA
GetCurrentThreadId
GetCurrentProcessId
ReadFile
GetModuleHandleA
EndUpdateResourceW
CopyFileW

ole32

OleIsRunning
OleQueryCreateFromData
CoInitialize
CoFileTimeToDosDateTime
OleFlushClipboard
CoGetObjectContext
CoUninitialize
OleGetIconOfFile
CoCreateFreeThreadedMarshaler
CoRegisterSurrogate

Sections

.text
Size: 691KB - Virtual size: 690KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c3c0fb5b36e358b421981aec89a0729

Headers

File Characteristics

Imports

user32

msvcrt

ulib

kernel32

ole32

Sections

.text Size: 691KB - Virtual size: 690KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 1.1MB

.rsrc Size: 81KB - Virtual size: 84KB

.text
Size: 691KB - Virtual size: 690KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 1.1MB

.rsrc
Size: 81KB - Virtual size: 84KB