ea9ec5a86f795d219f99ccd3456fedd6_JaffaCakes118

General

Target

ea9ec5a86f795d219f99ccd3456fedd6_JaffaCakes118
Size

116KB
MD5

ea9ec5a86f795d219f99ccd3456fedd6
SHA1

03b8ea82497cfd0837e93ddfc9bffc51bba25bf9
SHA256

ca0eb22b357ef4199b70972c90e16aaff2ea5a586aaf9a0579bf003bd2753514
SHA512

ab189b07dd3ae48cc71813efc3fd9590f4ae29878aa7634d3dcca57c5d4b8471765be813af615ec0656510114e30b14b39a41ef19090850db470c05094445078
SSDEEP

1536:ExfJ+4QJ2NxqVJ4Rci20lRJGC1DE5GCOFLdXvTUyYKTA:EFJQJsxqV+Rci20zj1YuA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea9ec5a86f795d219f99ccd3456fedd6_JaffaCakes118

Files

ea9ec5a86f795d219f99ccd3456fedd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

631df8a0ee54057520563f25fea7d15e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SetWindowLongA
SetDlgItemTextA
SetCapture
ShowWindow
ReleaseCapture
RedrawWindow
PtInRect
OffsetRect
MessageBoxA
SendMessageA
LoadIconA
IsDlgButtonChecked
InvalidateRect
GetWindowRect
GetWindowLongA
GetParent
GetDlgItemTextA
GetDlgItem
GetDlgCtrlID
GetCursorPos
CharUpperA
GetCapture
GetActiveWindow
EndDialog
DrawTextA
DialogBoxParamA
CheckDlgButton
CallWindowProcA

kernel32

RtlZeroMemory
GetModuleFileNameA
SetCurrentDirectoryA
WriteFile
FlushFileBuffers
lstrlenA
lstrcpyA
lstrcatA
WinExec
UnmapViewOfFile
SizeofResource
SetFilePointer
SetFileAttributesA
SetEndOfFile
RtlMoveMemory
MapViewOfFile
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
FindResourceA
FreeLibrary
GetCommandLineA
GetFileAttributesA
GetFileSize
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
LoadLibraryA
LoadResource

shell32

ShellExecuteA

gdi32

CreateSolidBrush
GetObjectA
GetStockObject
RoundRect
SelectObject
SetTextColor
SetBkMode
SetBkColor
CreateFontIndirectA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

631df8a0ee54057520563f25fea7d15e

Headers

File Characteristics

Imports

user32

kernel32

shell32

gdi32

comdlg32

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 120KB - Virtual size: 120KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 120KB - Virtual size: 120KB