d3618ce4874acf4005ea5377d039877c_JaffaCakes118

General

Target

d3618ce4874acf4005ea5377d039877c_JaffaCakes118
Size

301KB
MD5

d3618ce4874acf4005ea5377d039877c
SHA1

d89dc1cb9ba98b375778842a0eab71e880a04be0
SHA256

2dc9a2919f3547c573fa102c57395009097288d32cde84856b3b676e83e74540
SHA512

1bde57464087020c9ff50343f135db357da3ca3baad9eed5b203d87fd086045bbdb461daf9fba48e533962dd9d8637f8d40c7ff9cfc073b97c41beac660500d4
SSDEEP

6144:C7QQJfK5MGjM/h5DwPwrN3oI/DVrIXNY1xjdvJ9mNRbeUIUZZJxm2pNY:MJf8WZ2eoI/DVkXirvfmHbg4TxDfY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3618ce4874acf4005ea5377d039877c_JaffaCakes118

Files

d3618ce4874acf4005ea5377d039877c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c09695062abc81d037e5bc24931d17cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegOpenKeyW
RegQueryValueExW

kernel32

ExitProcess
GetFileSize
InitializeCriticalSection
SetFilePointer
SetUnhandledExceptionFilter
TlsAlloc
TlsSetValue

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
signal
strcpy
wcscpy

user32

CheckMenuItem
CreateMenu
CreateWindowExW
DefWindowProcW
DestroyIcon
DrawEdge
EndPaint
FillRect
IsClipboardFormatAvailable
IsDialogMessageW
LoadCursorW
LoadImageW
PeekMessageW
PtInRect
SetMenu
SetMenuItemInfoW
SetWindowPos
SetWindowTextW
SystemParametersInfoW
TranslateMessage
ValidateRect
WaitForInputIdle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 380KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c09695062abc81d037e5bc24931d17cf

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 13KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 72B

.idata Size: 1KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 576B

.bss Size: - Virtual size: 380KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 72B

.idata
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 576B

.bss
Size: - Virtual size: 380KB

.rsrc
Size: 1KB - Virtual size: 1KB