f4dd2863fbf974685179db4e4095839b_JaffaCakes118

General

Target

f4dd2863fbf974685179db4e4095839b_JaffaCakes118
Size

27KB
MD5

f4dd2863fbf974685179db4e4095839b
SHA1

98ce92688b08eef04e1b66b66754cc80f88b387a
SHA256

5bd37fb646eb7a13b0319cc923a4b96cccd5b82dde459099d62f50a664f92eff
SHA512

cb2ae5dbfad68f524b9922f7b747723058e07542c2231aa77d11f12a2bd057138cf1049175ab7323a78f6fe186557d854169aace61070ac1a934fa8c7b404533
SSDEEP

768:HdD61jOkwPITni2QcXezwwBYhs89QoIu7Se:puakwP5bcbwBl89XIte

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4dd2863fbf974685179db4e4095839b_JaffaCakes118

Files

f4dd2863fbf974685179db4e4095839b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b46dcd0175ba1e891a705bbe4a6f5a00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetACP
CreateFileA
GetStringTypeA
GetFileType
WriteFile
MultiByteToWideChar
LCMapStringA
GetOEMCP
lstrcpyA
GetCommandLineA
TerminateProcess
SetHandleCount
GetStringTypeW
GetCurrentProcess
SetFilePointer
lstrcpynW
GetStartupInfoA
GetVersion
lstrcpynA
GetModuleFileNameA
LCMapStringW
lstrcatA
GetCPInfo

user32

GetWindowTextLengthA
DialogBoxParamA
GetCursor
CopyIcon
DrawTextA
EndDialog
LoadCursorA
GetWindowTextA
CopyRect
DrawIconEx
GetFocus
CreateIcon
GetDlgItem
IsWindow
IsMenu
GetDC
InsertMenuA
LoadMenuA
DrawTextW
DrawIcon
DialogBoxParamW
GetMenu
CopyImage
CloseWindow

comctl32

ImageList_Destroy
DrawStatusTextW
ImageList_EndDrag
CreateMappedBitmap
ImageList_Add
ImageList_LoadImageA
CreateToolbarEx
ImageList_GetIcon
ImageList_LoadImageW
DllGetVersion

advapi32

RegOpenKeyExW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyA
RegCreateKeyA
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b46dcd0175ba1e891a705bbe4a6f5a00

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 18KB - Virtual size: 17.2MB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 18KB - Virtual size: 17.2MB