dd8384217d4e5d2d239f7bb3662440c6_JaffaCakes118

General

Target

dd8384217d4e5d2d239f7bb3662440c6_JaffaCakes118
Size

44KB
MD5

dd8384217d4e5d2d239f7bb3662440c6
SHA1

7f428db48c28e2333f3966752b53e61c9f451fd6
SHA256

5c638a86205c3a21e3a9e944416cadeda4b7ad4f4ff47c56bb386f8c94af7b97
SHA512

d4335be6bd8370ce45a19823e6b8b1787a668b1d463099c44766129bfc8b70c5297656b5e8aee3ad182efaa71b10b5c44a358335cacff7c14367bba46cbf363c
SSDEEP

768:TIRuoUkMH99+pfrvQhj1dFRsRBPy43ooO:sRuTdUTvQhSc6oo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd8384217d4e5d2d239f7bb3662440c6_JaffaCakes118

Files

dd8384217d4e5d2d239f7bb3662440c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0047391bd0052fbf7189b89b8e853268

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
CreateFileA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
RtlUnwind
VirtualFree
HeapCreate
GetCPInfo
GetModuleFileNameA
HeapDestroy
GetFileType
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
WriteFile
ReadFile
TerminateProcess
GetCurrentProcess
SetFilePointer
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStringTypeW

user32

TranslateMessage
DispatchMessageA
GetDlgItemTextA
EndDialog
MessageBoxA
SetDlgItemTextA
GetDlgItem
IsDlgButtonChecked
EnableWindow
CheckDlgButton
DefWindowProcA
DialogBoxParamA
PostQuitMessage
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetMessageA

gdi32

GetStockObject

comdlg32

GetOpenFileNameA
CommDlgExtendedError

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0047391bd0052fbf7189b89b8e853268

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 1KB