e0e5df36186dce1b6ec644fbd982941e_JaffaCakes118

General

Target

e0e5df36186dce1b6ec644fbd982941e_JaffaCakes118
Size

264KB
MD5

e0e5df36186dce1b6ec644fbd982941e
SHA1

a8f0a33558794420fd79deef4532402a5a56ad7e
SHA256

7acb978e5ca230ae4aa64e87abd017163f1ee7d7d47033a65453150bad4c14f5
SHA512

363c75c965b8c75f527bb0f419c8bf7987c47dbdded5bf4f596ffc5267320eb9cc0f46a58296fe215e948d9d523a01aab09ef9e7496e36621fd1e8131b2aa32a
SSDEEP

6144:8Yu7nerS/7g1rwRCuq9ndgt3BcoxxjiXu0ahWSttQZTw:oncSEb9+tx/3Vj3t69w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0e5df36186dce1b6ec644fbd982941e_JaffaCakes118

Files

e0e5df36186dce1b6ec644fbd982941e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fa7a79d77874f93be15bfd5eb7d218f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetModuleHandleA
CreateFileA
LoadLibraryA
GetTempPathW
GetTempPathA
CreateFileW
CloseHandle
GetFileType
FindClose
GetStartupInfoA

user32

ShowWindow
EmptyClipboard
CloseClipboard
IsWindowVisible
BeginPaint
GetWindowTextW
GetDC
CreateWindowExA
GetWindowTextA
CloseWindow
IsWindowEnabled
GetWindow
GetWindowRect
DrawTextW
DefWindowProcW
DefWindowProcA
DestroyWindow
EnableWindow
DrawTextA
DeleteMenu

gdi32

CreateRoundRectRgn
CreateCompatibleDC

advapi32

RegOpenKeyExA
RegCloseKey

oleaut32

GetErrorInfo
SysFreeString
SafeArrayCreate
SysAllocStringByteLen
SetErrorInfo
SafeArrayCopy
CreateErrorInfo
SysAllocString
SysAllocStringLen

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fa7a79d77874f93be15bfd5eb7d218f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

oleaut32

msvcrt

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 4KB

.rsrc Size: 124KB - Virtual size: 122KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 124KB - Virtual size: 122KB