f52dd714824cccb9939c0710f8aca4a3_JaffaCakes118

General

Target

f52dd714824cccb9939c0710f8aca4a3_JaffaCakes118
Size

56KB
MD5

f52dd714824cccb9939c0710f8aca4a3
SHA1

cddf2198a88e13b01a86cdb46f8adb99497c225f
SHA256

f126f10e6a6924bdccefede5200eb7935cfbc03d83b58173c360c044094ee907
SHA512

9b152c5c10ede9369bb1a783e8061716a1868652fbbcc821bdf311f71fe85ba4ac67f60faee6dcfc0db413183b52f59cf5493965253016be44a4220e94bef2c0
SSDEEP

1536:FSkb5NNfcAuB5jSlKKynO9dFsogTR/39Y3A:0G5jfcljSQKyO9dFk/NY3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f52dd714824cccb9939c0710f8aca4a3_JaffaCakes118

Files

f52dd714824cccb9939c0710f8aca4a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0518d3462aab53158937492c65560361

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
Sleep
WaitForSingleObject
GetPrivateProfileStringW
GlobalAlloc
FindFirstFileW
InterlockedDecrement
WideCharToMultiByte
CreateFileW
LoadLibraryA
FreeLibrary
GetCurrentProcess
FindResourceExW
GetModuleHandleW
GlobalAddAtomW
SetEndOfFile
CreateWaitableTimerW
GlobalLock
CancelWaitableTimer
CreateThread
GetFileSize
GetProcAddress
CloseHandle
ReadProcessMemory
SetWaitableTimer
LoadResource
ResetEvent
FindNextChangeNotification
MulDiv
ReadFile
ResumeThread
lstrlenW
GetVersion
SetThreadPriority

user32

GetWindowTextW
DrawTextW
CreateWindowExW
TranslateMessage
LoadStringW
GetSysColor
TrackPopupMenu
GetMessageW
DestroyIcon
DialogBoxParamW
IsWindow
GetWindowDC
GetKeyState
PostMessageW
SystemParametersInfoW
SendMessageW
SetWindowTextW
DispatchMessageW
LoadCursorW

gdi32

CreateBitmap
CreateRoundRectRgn
GetMapMode
StretchBlt
CreateCompatibleBitmap
CreateSolidBrush
GetDeviceCaps
SelectObject

advapi32

LookupAccountSidW
RegCloseKey
RegDeleteValueW
SetSecurityDescriptorDacl
RegOpenKeyExW

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0518d3462aab53158937492c65560361

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB