cfb6869b4ab03e2bd25aa2bd132ded75_JaffaCakes118

General

Target

cfb6869b4ab03e2bd25aa2bd132ded75_JaffaCakes118
Size

73KB
MD5

cfb6869b4ab03e2bd25aa2bd132ded75
SHA1

b1843340d7dff1c52c7318f762d673214f4cb599
SHA256

1d4bda5373d47a40934766877c4484eda7a1aed04fea7fde12cd46d231994f32
SHA512

dfdb1025fadfd01e7e6cf22d06465620d721d0e0525bee85a3eeabb4bcda6cf74edf46344e6f6849ec5027072a960f2a1a2ecb1595fac35f7ba441e63d3d1f9f
SSDEEP

1536:l1XCqC+0IHeO9cCPF2KEU3+smOciZEu2jM9KGA:nCReeO9c4Z3+I9Eu2jSKB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfb6869b4ab03e2bd25aa2bd132ded75_JaffaCakes118

Files

cfb6869b4ab03e2bd25aa2bd132ded75_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9182c71d9850b06178d699453900b20d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
GetLongPathNameA
ExitProcess
WritePrivateProfileStructW
GetCompressedFileSizeA
VirtualFree
FindFirstFileExA
GetFileTime
GetModuleHandleA
VirtualAlloc
InterlockedExchange
GetAtomNameW
GetPrivateProfileIntA
LoadLibraryA
VirtualProtect
GetModuleHandleW
GetFileSize
CreateDirectoryW

msvcrt

_mktime64
memcpy
rewind
_purecall
system
strncpy
sqrt
strpbrk
abs
_cgets
_mbcasemap
getenv
is_wctype
??_7bad_typeid@@6B@

comdlg32

PageSetupDlgW
ChooseColorW
LoadAlterBitmap
PageSetupDlgA
Ssync_ANSI_UNICODE_Struct_For_WOW
WantArrows
CommDlgExtendedError
ChooseFontW
ReplaceTextW
PrintDlgA
FindTextW
dwOKSubclass
GetSaveFileNameW
GetOpenFileNameA
ReplaceTextA
ChooseFontA
ChooseColorA
dwLBSubclass
GetFileTitleA
PrintDlgExA
ChooseColorW

winmm

waveInGetErrorTextA
mmioSeek
mixerGetLineControlsA
mmioStringToFOURCCA
waveOutGetNumDevs
mmioClose
waveInGetID
sndPlaySoundW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9182c71d9850b06178d699453900b20d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

comdlg32

winmm

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 17KB - Virtual size: 16KB

.rsrc Size: 34KB - Virtual size: 33KB

.reloc Size: 512B - Virtual size: 70B

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 34KB - Virtual size: 33KB

.reloc
Size: 512B - Virtual size: 70B