f6116b6048f3301f2cbaafd2bc2b19df_JaffaCakes118

General

Target

f6116b6048f3301f2cbaafd2bc2b19df_JaffaCakes118
Size

209KB
MD5

f6116b6048f3301f2cbaafd2bc2b19df
SHA1

dca5461e94b7b95cb038785dc8415e1664661f67
SHA256

797bb56eb231a59e34796cc72d5dbba6a91bca843e42962ec91123e05f366cdd
SHA512

118870a1fcfd7b8cb1d02ce431b2caab0c7264e075ba5e8877e4fc55b9615115aad39304d061c035e8e70418f6e3a3ead4a544f3bf72c44e9b236fcab19ef03f
SSDEEP

3072:2Hii79vWMacWi3sTnFfa9+wb9CobOtM9KbbLJIgNxn5vpYDq9fW/qoS/917:2C4AX9q+wbwtMgjVZ1pr9fuqoSl17

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6116b6048f3301f2cbaafd2bc2b19df_JaffaCakes118

Files

f6116b6048f3301f2cbaafd2bc2b19df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4744389471ca3362675d6480255df34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyExW
RegOpenKeyW

kernel32

CreateThread
EnterCriticalSection
ExitProcess
InitializeCriticalSection
SetFilePointer
SetUnhandledExceptionFilter
TerminateProcess
TerminateThread
UnmapViewOfFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
signal
strcpy
wcscpy

user32

AdjustWindowRectEx
CallNextHookEx
CreateMenu
DrawFocusRect
DrawTextW
EnumClipboardFormats
GetClipboardFormatNameW
GetMenuItemInfoW
HideCaret
MapWindowPoints
RegisterClassW
SetClipboardData
SetParent
SetTimer
SystemParametersInfoW
TranslateMessage
UnregisterHotKey

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4744389471ca3362675d6480255df34

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 156B

.idata Size: 1KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 576B

.bss Size: - Virtual size: 38KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 156B

.idata
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 576B

.bss
Size: - Virtual size: 38KB

.rsrc
Size: 2KB - Virtual size: 2KB