ce3d33b5eec8f9cb0339430b9f8ea105_JaffaCakes118

General

Target

ce3d33b5eec8f9cb0339430b9f8ea105_JaffaCakes118
Size

97KB
MD5

ce3d33b5eec8f9cb0339430b9f8ea105
SHA1

e1bc2a4c11300d6f9de37e4d9ba0134dcf89a5c1
SHA256

c14a814dd2230f1bcd29d3c8d1d67b3c6ab87f3841143272af684341d9ed6c33
SHA512

f768f28d37b8ca5358a97a4c0c2129f083d21a4ec0db970411a7bf5e633ed676388f3669e0c1d44e25d5155fd61d002b31605e2d290fa1e0873a81856efa3a29
SSDEEP

3072:m8YRDI/KfMW6SDrzp/mP40PQmgKKsQwkwh0L:mxRT0vSDrV10PQmgKLDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce3d33b5eec8f9cb0339430b9f8ea105_JaffaCakes118

Files

ce3d33b5eec8f9cb0339430b9f8ea105_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42e8dd3a2a3305075aab9f853c2c9da1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA

gdi32

GetClipBox
GetObjectA
SelectObject

oleaut32

VariantCopyInd
VariantChangeType
SysAllocStringLen
SafeArrayGetElement
SafeArrayGetUBound
GetErrorInfo

user32

GetFocus
CreateWindowExA
IntersectRect
EnableWindow
GetClipboardData
EnumWindows
SetMenu
WaitMessage
SetWindowsHookExA
IsDialogMessageW
RegisterClipboardFormatA
DestroyMenu
TranslateMessage
AdjustWindowRectEx
GetForegroundWindow
DispatchMessageA
TranslateMDISysAccel
GetSysColorBrush
FillRect
SystemParametersInfoA
GetKeyboardLayoutList
GetWindowTextA

version

VerInstallFileA
VerFindFileA

kernel32

VirtualAlloc
GetModuleHandleA
LoadLibraryA
GetOEMCP
GetLastError
lstrlenW
lstrlenA
IsBadReadPtr
GetCommandLineA
ExitThread
GetVersionExA
ExitProcess
GetACP
GetProcAddress
GetCommandLineW

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 519B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42e8dd3a2a3305075aab9f853c2c9da1

Headers

File Characteristics

Imports

advapi32

gdi32

oleaut32

user32

version

kernel32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 230KB - Virtual size: 229KB

.data Size: 9KB - Virtual size: 8KB

BSS Size: 1024B - Virtual size: 519B

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 230KB - Virtual size: 229KB

.data
Size: 9KB - Virtual size: 8KB

BSS
Size: 1024B - Virtual size: 519B

.rsrc
Size: 9KB - Virtual size: 8KB