f5b309340ebee44e79c2323754044217_JaffaCakes118

General

Target

f5b309340ebee44e79c2323754044217_JaffaCakes118
Size

30KB
MD5

f5b309340ebee44e79c2323754044217
SHA1

72175731ed4ae790ecd41ba63060efc3632d92de
SHA256

979a80f72cb4158f111f413ea72575a7300644daa1e3a3ebffa0fc59816cd2b7
SHA512

4b12363e3276a558df9e3d2ebe84aec1beeafe16f1f513b67380bfdc68212fd355ecd893547c687c6bb5ca61e5eb0e4052ef6f6224d2b25ae9b1afec42436c99
SSDEEP

768:ByyyyyyyyyyyyyyyyvI7x/dNlqde/GcL2+xf9eW52TXTHJYdQId1e:twRUde/GYpN9e3D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5b309340ebee44e79c2323754044217_JaffaCakes118

Files

f5b309340ebee44e79c2323754044217_JaffaCakes118
.exe windows:31626 windows x86 arch:x86

a667497758195368213304b2caab232e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetACP
SetFilePointer
WideCharToMultiByte
SetFilePointer
VirtualAlloc
FreeLibrary
GetACP
GetModuleHandleW
LocalAlloc
TerminateProcess
GetCurrentProcessId
ReadFile
VirtualAlloc
LocalAlloc
SetLastError
GetCurrentThreadId
VirtualAlloc
InterlockedDecrement
VirtualAlloc
SetEvent
GetTickCount
ExitProcess
ReadFile
InitializeCriticalSection
GetModuleHandleW
HeapAlloc
lstrcpyW
LoadLibraryW
LoadLibraryW
lstrcpyW
TerminateProcess
GetCommandLineA
HeapFree
GetCurrentThreadId
InterlockedDecrement
GetModuleHandleA
InterlockedIncrement
HeapFree
CloseHandle
EnterCriticalSection
lstrcmpiW
LocalAlloc
GetStartupInfoW
LocalAlloc
GetVersionExA
CreateFileW

user32

GetDlgItem
InvalidateRect
SetWindowTextW
ScreenToClient
GetKeyState
IsDialogMessageW
RegisterClassExW
GetMessageW
GetCursorPos
GetSystemMetrics
CharNextW
GetWindowRect
TranslateMessage
LoadIconW
RegisterClassW
CreateDialogParamW
OffsetRect
PeekMessageW
wsprintfW
GetParent
GetDesktopWindow
GetDlgItem
MapWindowPoints
ReleaseCapture
DestroyMenu
wsprintfW
PostQuitMessage

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a667497758195368213304b2caab232e

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 5KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 4KB

.rsrc Size: 10KB - Virtual size: 12KB

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 5KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 10KB - Virtual size: 12KB