d0d97ad630e5cbc8aa416c29fa659fc9_JaffaCakes118

General

Target

d0d97ad630e5cbc8aa416c29fa659fc9_JaffaCakes118
Size

96KB
MD5

d0d97ad630e5cbc8aa416c29fa659fc9
SHA1

b02e35d7a232d7f6443e2569695808a26268e548
SHA256

d0a3d4f75663b60ac3fcdc166af7a33c6664db6ee7362462272d471a419db644
SHA512

bfc958022b0f1cc8e16e43c2dc8a249f33321631748a03bf96d9546474833fb670b48861ffc06a7b7fc8100e685395e77c99729c6fc3325f8471024ff372f6c9
SSDEEP

1536:jxYlo/D1dCytzJNKI9ItULvUKC34taj/e+vGannFJXg24+nPIEyhEIYZFcwG0k2t:8obnJJN5+t4UKJtM/cansEZyVYfBvb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0d97ad630e5cbc8aa416c29fa659fc9_JaffaCakes118

Files

d0d97ad630e5cbc8aa416c29fa659fc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b758c0fe760980b3cb46ae019f908a26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetDateFormatA
HeapAlloc
GetStringTypeW
GetStringTypeA
GetFileType
lstrcmpA
Sleep
DeleteFileA
SetLastError
GetCommandLineA
GlobalFree
GetModuleHandleA
GetFileSize
HeapFree
GetLocalTime
CloseHandle
GetModuleFileNameA
lstrcmpiA
GetFileAttributesA

advapi32

RegOpenKeyA
RegEnumValueA
RegGetKeySecurity
RegQueryValueA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegCreateKeyExW
RegEnumKeyA
RegLoadKeyW
RegQueryValueExW
RegCreateKeyW
RegCreateKeyExA
RegReplaceKeyW

comctl32

ImageList_EndDrag
ImageList_Create
ImageList_AddIcon
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_Replace
ImageList_Remove
ImageList_LoadImageW
ImageList_Destroy
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_LoadImageA
ImageList_GetIcon
ImageList_GetDragImage
ImageList_AddMasked

user32

LoadCursorA
DrawIcon
BlockInput
GetDC
CreateIcon
CopyImage
DrawTextW
GetFocus
AppendMenuW
AppendMenuA
LoadMenuA
EndDialog
GetWindowTextLengthA
IsWindow
DrawIconEx
CopyIcon
GetWindowTextA
IsMenu
AlignRects
GetMenu

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 7KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xLuEhT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Nkcznd
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b758c0fe760980b3cb46ae019f908a26

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

user32

Sections

.text Size: 6KB - Virtual size: 5KB

.adata Size: 24KB - Virtual size: 23KB

.hdata Size: 7KB - Virtual size: 39KB

.xLuEhT Size: 2KB - Virtual size: 2KB

.Nkcznd Size: 1024B - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.adata
Size: 24KB - Virtual size: 23KB

.hdata
Size: 7KB - Virtual size: 39KB

.xLuEhT
Size: 2KB - Virtual size: 2KB

.Nkcznd
Size: 1024B - Virtual size: 1KB