dc7a50ec56121948593aea95175d826e_JaffaCakes118

General

Target

dc7a50ec56121948593aea95175d826e_JaffaCakes118
Size

88KB
MD5

dc7a50ec56121948593aea95175d826e
SHA1

6995b498b13d6090030ac055e89b548918cc2129
SHA256

d423b456724e2e80b396c9a31d35c7e7eec9b3869a29a11714e518497c632b4f
SHA512

8e5e2346a81e0c0a422f2e45fa1e633a769ed0d82442d8bbce00240c8595629c3a226c4b4fa7febb9f89eb61952b57c3e317b15c1f9e19e9e525be33918a3efe
SSDEEP

1536:jGNKbRIyb3YgXnVimDM+PrSlV8T2M7baFhqOAo5qIH1mBQ1n:j2+Iybb8+PrSlVsz7bhaLN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc7a50ec56121948593aea95175d826e_JaffaCakes118

Files

dc7a50ec56121948593aea95175d826e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84f6e1e1247ae012232c91f5e0822713

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeleteVolumeMountPointW
EnumResourceTypesA
ExitProcess
GetACP
GetBinaryTypeA
GetCommandLineA
GetCompressedFileSizeW
GetFileAttributesExA
GetModuleHandleA
GetProfileIntA
GetStartupInfoA
GetSystemTimeAsFileTime
GetVersionExA
HeapAlloc
HeapCreate
VirtualProtect
WriteFileEx
_lopen

user32

SystemParametersInfoA
SetMenuItemInfoA
SetPropA
GetSysColorBrush
GetSysColor
GetClassNameA
FindWindowA
DrawEdge

comctl32

ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_SetImageCount
ImageList_SetFilter
ImageList_Read
ImageList_GetImageInfo
ImageList_DrawEx
CreateStatusWindowW
DrawStatusTextA
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_SetScrollProp
ImageList_Add
ImageList_Copy

ole32

CoFileTimeNow
CoTaskMemAlloc
CoGetMalloc
CoCreateInstance
CoCreateGuid
CoBuildVersion

dbghelp

FindFileInSearchPath
ImageRvaToSection
SymEnumerateSymbols64

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84f6e1e1247ae012232c91f5e0822713

Headers

File Characteristics

Imports

kernel32

user32

comctl32

ole32

dbghelp

Sections

.text Size: 48KB - Virtual size: 47KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 48KB - Virtual size: 47KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB