eee16bd3e96e3d71c7aee4b0991decda_JaffaCakes118

General

Target

eee16bd3e96e3d71c7aee4b0991decda_JaffaCakes118
Size

3.7MB
MD5

eee16bd3e96e3d71c7aee4b0991decda
SHA1

692b27c802bdcc2140fa6d253bfeb62308f01878
SHA256

94e6c9ac76cfc3492d20255e9f38120306fadc906b0e24d35acdd560b39c80bf
SHA512

6ae12b9c49a41fa4a5ccac69c09a50fdbfc9c9ecd6bd16aa07401c854365cd4b21739bed04b173a17d86ccaaefbd83c4943080e70631ec248779ee3db9a1f8a5
SSDEEP

98304:jvXduljY1KcO8Go4ekgymUZgNbV+wIOPfA+zXVJsT/gmxbD+e0:LD1AQ4FaUyNB/XJKgMbZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eee16bd3e96e3d71c7aee4b0991decda_JaffaCakes118

Files

eee16bd3e96e3d71c7aee4b0991decda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfe73124486bdb3b9a70911d99e1e572

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameA
GlobalFindAtomA
CreateMutexA
FreeEnvironmentStringsA
OpenMutexA
GetTickCount
GetFileAttributesExA
UnhandledExceptionFilter
PeekConsoleInputW
WritePrivateProfileSectionA
LocalSize
GetSystemInfo
MoveFileW
GenerateConsoleCtrlEvent
SetEvent
GlobalFree
GetPrivateProfileSectionW
SetConsoleOutputCP
EnumSystemCodePagesW
ReadConsoleOutputA
DebugBreak
CreateMutexW
PrepareTape
GetACP
ExitProcess

comdlg32

GetOpenFileNameW
ReplaceTextA

user32

ModifyMenuW
SetLastErrorEx
BroadcastSystemMessageW
WaitMessage
GetMenuItemRect
DrawTextA
FrameRect
ScrollDC
PostMessageW
RegisterWindowMessageW
OpenWindowStationA
ShowCursor
MonitorFromWindow
SetDlgItemTextW
DrawIconEx
GetMessagePos
DialogBoxParamA
GetCaretBlinkTime
SendMessageCallbackW
ChangeDisplaySettingsW
LoadMenuA
GetDoubleClickTime
IsWindowUnicode
ValidateRect
GetTabbedTextExtentW
CopyAcceleratorTableA
TranslateAcceleratorW
SetCapture

comctl32

CreatePropertySheetPageA
ImageList_GetBkColor

msvcrt

_snprintf
ftell
_wremove
_isatty
_mbschr
fgetwc
_wsystem
_wpopen
fopen
_wfopen
_splitpath
_wcsnicmp
_ui64tow
_ismbcdigit
_wsopen
_mbsrchr
iswprint
srand
fgetc
_beginthread
_mbsstr

Sections

.text
Size: 12KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfe73124486bdb3b9a70911d99e1e572

Headers

File Characteristics

Imports

kernel32

comdlg32

user32

comctl32

msvcrt

Sections

.text Size: 12KB - Virtual size: 231KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3.5MB - Virtual size: 3.5MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 12KB - Virtual size: 231KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3.5MB - Virtual size: 3.5MB

.rsrc
Size: 19KB - Virtual size: 18KB