db6a1fce9abe7a5f24d905fb495dfb57_JaffaCakes118

General

Target

db6a1fce9abe7a5f24d905fb495dfb57_JaffaCakes118
Size

859KB
MD5

db6a1fce9abe7a5f24d905fb495dfb57
SHA1

e544f207a1365cf6de26814e18ec1f898995db49
SHA256

91684c0d41e8d211b158f9f9f8a9070f3448b99c8302b8e4fa48b8e963d55b21
SHA512

1b68b23eb833f4e3b8763812ea3dd8db2a273e025946e3bdb7f0e0b0d66a58457e2542cab6ed8f7298ad320d223755b84cee47bb54bc4561cf74d8fffda9a82f
SSDEEP

12288:TB1Zwd05ldmUTrYiPY3QMC2OAD3qZL1EUV+cq9urRPHpYpRM8QsRnH4J970x:n1TcigChRR1tVvUurFHiprJH8w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db6a1fce9abe7a5f24d905fb495dfb57_JaffaCakes118

Files

db6a1fce9abe7a5f24d905fb495dfb57_JaffaCakes118
.exe windows:5 windows x86 arch:x86

835361e46d2170147d4df93d698acf72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
wsprintfA
LoadCursorA
GetAsyncKeyState
SetWindowRgn
DispatchMessageW
SetWindowsHookExA
GetWindowTextW
UnionRect
ValidateRect
RegisterWindowMessageA
IntersectRect
CharNextW
EnumWindows
EndPaint
IsWindowEnabled
MoveWindow
SetCursor
GetActiveWindow
OffsetRect
GetTopWindow
ShowWindow
SetDlgItemTextW

kernel32

GetWindowsDirectoryA
GetCurrentThread
GetThreadLocale
GetFileSize
GetStartupInfoA
MoveFileW
DuplicateHandle
WritePrivateProfileStringA
GetOEMCP
DebugBreak
MultiByteToWideChar
UnlockFile
GetEnvironmentStringsA
LockFile
GetCommandLineA
GetSystemDirectoryW
LoadLibraryA
lstrcpynA
GetTempFileNameA
EnterCriticalSection
DeleteCriticalSection
VirtualAlloc
LeaveCriticalSection
GetShortPathNameW
Sleep
ReadFile
SetFileAttributesW
CompareStringW
SetThreadPriority
GetSystemDefaultLangID
WriteFile
HeapCreate

advapi32

FreeSid
RevertToSelf
OpenThreadToken
RegOpenKeyA
InitializeAcl

Sections

.text
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 313KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 363KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

835361e46d2170147d4df93d698acf72

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

Sections

.text Size: 178KB - Virtual size: 178KB

.rdata Size: 313KB - Virtual size: 312KB

.data Size: 363KB - Virtual size: 1.8MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 178KB - Virtual size: 178KB

.rdata
Size: 313KB - Virtual size: 312KB

.data
Size: 363KB - Virtual size: 1.8MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB