cea03723dc580cb0da6b897f30a35006_JaffaCakes118

General

Target

cea03723dc580cb0da6b897f30a35006_JaffaCakes118
Size

401KB
MD5

cea03723dc580cb0da6b897f30a35006
SHA1

a3a96cf1f873a893e895d116dcf5526968c12707
SHA256

eefc6b459615ac0b0ad451d2508806361e6956b3c8f8f40c7b0e3a1037ebb7dd
SHA512

f2989399c67d23c1b88b2dc639f5cb6a7d4dde3c5938ee1d73c34e5a03728e61e3c6124045002938dc26de3113515c8e1e1390f8d2aa724fc7646aac740dec42
SSDEEP

12288:PDIrv2HgCugmLuZBU6B471A86n4pl1IEj:PDI0gvjoGj6n4plH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cea03723dc580cb0da6b897f30a35006_JaffaCakes118

Files

cea03723dc580cb0da6b897f30a35006_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78fc0610f335bd225a1c693d247f682a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamW
ToUnicodeEx
WinHelpW
DrawFrame
GetKeyboardLayout
IsMenu
InSendMessage
IsZoomed
SetForegroundWindow
SetScrollPos
WINNLSGetIMEHotkey
CharNextW
DdeDisconnectList
EnumWindowStationsA
GetIconInfo
BroadcastSystemMessage
GetMenuItemCount
SwapMouseButton
PeekMessageA
GetAsyncKeyState

kernel32

ExitProcess
VirtualFree
GetCommandLineA
MultiByteToWideChar
QueryPerformanceCounter
TlsSetValue
HeapAlloc
InterlockedExchange
SetLastError
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetCurrentProcessId
EnterCriticalSection
VirtualQuery
HeapReAlloc
FindResourceA
HeapDestroy
GetStdHandle
GetEnvironmentStrings
GetModuleFileNameA
GetTickCount
VirtualAlloc
GetSystemTimeAsFileTime
GlobalAddAtomW
GetProcAddress
InitializeCriticalSection
GetCurrentThreadId
HeapCreate
TlsAlloc
GetFileType
GetLastError
HeapFree
SetLocalTime
TerminateProcess
GetCommandLineW
GetVersion
WriteFile
GetCurrentThread
GetStartupInfoW
GetCurrentProcess
FreeEnvironmentStringsW
UnhandledExceptionFilter
TlsFree
RtlUnwind
GetModuleFileNameW
LeaveCriticalSection
DeleteCriticalSection
SetHandleCount
LoadLibraryA
GetModuleHandleA
TlsGetValue
GetStartupInfoA
IsBadWritePtr

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78fc0610f335bd225a1c693d247f682a

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 115KB - Virtual size: 115KB

.rdata Size: 3KB - Virtual size: 16KB

.data Size: 275KB - Virtual size: 274KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 115KB - Virtual size: 115KB

.rdata
Size: 3KB - Virtual size: 16KB

.data
Size: 275KB - Virtual size: 274KB

.rsrc
Size: 6KB - Virtual size: 6KB