dc579598f5431dea133a8b4009c57d57_JaffaCakes118

General

Target

dc579598f5431dea133a8b4009c57d57_JaffaCakes118
Size

106KB
MD5

dc579598f5431dea133a8b4009c57d57
SHA1

2584eb718a2b1cc456783756b8d62d303e12d6cd
SHA256

3fc2a511812fd2173108948f43967d44b3ecaae8d012c5f8f06354fcf82079ef
SHA512

d2875b11177c413b7d6d644c3c7696f1df131bdd95d8ad38fdccbc067fcad8748a490ce873be559bfa0f23f25a0950dd8e193d942950a6572c9427ef1766c14a
SSDEEP

3072:lqEfKij2hHs/DI6+g0AqphBoJd40ZIfk1Ok:lNj2Fs/D8g0AvJhisP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc579598f5431dea133a8b4009c57d57_JaffaCakes118

Files

dc579598f5431dea133a8b4009c57d57_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4e8a41fffe1cf5b51bb7c4ecce7da889

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetTimeZoneInformation
GetUserDefaultLangID
GetStartupInfoA
SetCurrentDirectoryA

user32

CharLowerA
RegisterWindowMessageA
GetMenuItemCount
LoadBitmapA
GetSystemMetrics
EnableWindow
MapWindowPoints
GetClassNameA
DestroyCursor
GetSubMenu
GetSysColor
GetDC

msvcrt

_getch
_isctype
fprintf
_except_handler3
_read
__setusermatherr
__getmainargs
_XcptFilter
__p__fmode
_adjust_fdiv
__p__commode
exit
_amsg_exit
_acmdln
towlower
_initterm
_unlock
_flsbuf
__set_app_type
sqrt
strtoul
_strdup

shell32

DragQueryFile
ShellExecuteExW
FindExecutableW
SHAppBarMessage
SHFileOperationA
Shell_NotifyIconA

ole32

OleGetClipboard
PropVariantClear
CoTaskMemFree
StgOpenStorage
CoFreeUnusedLibraries
CoGetInterfaceAndReleaseStream
OleUninitialize
OleSetMenuDescriptor
ReleaseStgMedium
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes

oleaut32

SafeArrayCreate
CreateErrorInfo
SetErrorInfo
SafeArrayGetElement
SafeArrayPutElement
SysStringLen
VariantCopyInd
SafeArrayUnaccessData
SysAllocStringLen

comctl32

ImageList_Create
CreateStatusWindowA
InitializeFlatSB
PropertySheetA
CreatePropertySheetPageA
ImageList_LoadImageW
ImageList_SetDragCursorImage

advapi32

DeregisterEventSource
RegEnumKeyExA
EqualSid
RegOpenKeyExW

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e8a41fffe1cf5b51bb7c4ecce7da889

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

shell32

ole32

oleaut32

comctl32

advapi32

Sections

.text Size: 75KB - Virtual size: 75KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 75KB - Virtual size: 75KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 25KB - Virtual size: 25KB