d341d97a90c6e9ead5ca56fc53b70821_JaffaCakes118

General

Target

d341d97a90c6e9ead5ca56fc53b70821_JaffaCakes118
Size

68KB
MD5

d341d97a90c6e9ead5ca56fc53b70821
SHA1

4dc1fbdd2b5efdefc8fa28ae126b1c028383adb6
SHA256

1f18d1802c9d64168a12fc1b8448c837c90205015200f3ec3896cea19e792486
SHA512

1e5129cb90a070ea3d306abf448111294588e3fb7c7e1ff5eb9dffe07f9f7222e55a44d804ef17381c71baaea608ee91972014dee6d197edee367d46e225d0bd
SSDEEP

1536:nmhRS8r2xdNg8ZOHEh4AjmqEf+jeHvjokrYv6Bz8a71UtkSLhDlJ:koldNg8IEeAjml+MZpBzVUkShlJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d341d97a90c6e9ead5ca56fc53b70821_JaffaCakes118

Files

d341d97a90c6e9ead5ca56fc53b70821_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fcdaf300ec128daa7e94d975371ef1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
CreateFontIndirectA
GetTextExtentPoint32A
CreateDIBitmap
GetObjectA
DeleteObject
SetStretchBltMode
BitBlt
GetDeviceCaps
SetBkMode
DeleteDC
TextOutW
SelectPalette
CreatePalette
CreateCompatibleDC
RealizePalette
SetTextColor

kernel32

GetFileAttributesA
GetVersionExA
CreateFileMappingW
CreateEventA
lstrcmpiA
FormatMessageW
GetFileAttributesW
GetTickCount
UnhandledExceptionFilter
LoadLibraryA
GetProcAddress
GetLocaleInfoA
HeapSize
InterlockedDecrement
GetLastError
GetSystemDefaultLCID
Sleep
GlobalUnlock
GetACP
CompareFileTime
ReleaseMutex
GetModuleHandleA
GetVersion
OpenProcess
GetModuleFileNameA
HeapReAlloc
VirtualAlloc
LoadResource
EnterCriticalSection
HeapDestroy
VirtualFree

user32

LoadStringW
GetDC
UpdateWindow
GetSystemMetrics
EnumDisplayMonitors
CharNextW
LoadIconA
DrawTextW
CharNextA
GetDesktopWindow
DefWindowProcA
CreateWindowExA
EndPaint
LoadBitmapA
MessageBoxA
UnregisterClassA
SystemParametersInfoA
DestroyWindow
BeginPaint
RegisterClassA
ReleaseDC

advapi32

RegOpenKeyExW
RegSetValueExW
CryptVerifySignatureA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExW
CryptAcquireContextA
CryptHashData
RegSetValueExA
RegEnumValueW
RegDeleteValueW
RegQueryInfoKeyA
CryptDestroyHash
RegDeleteValueA
RegCreateKeyExA

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fcdaf300ec128daa7e94d975371ef1a

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

user32

advapi32

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 17KB - Virtual size: 17KB

.rsrc Size: 1KB - Virtual size: 13KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 17KB - Virtual size: 17KB

.rsrc
Size: 1KB - Virtual size: 13KB