f63ec5a484c991a42576cd974ca8e2fd_JaffaCakes118

General

Target

f63ec5a484c991a42576cd974ca8e2fd_JaffaCakes118
Size

84KB
MD5

f63ec5a484c991a42576cd974ca8e2fd
SHA1

4d2f9214bf0029aa6f0cfba24c27c12a13d85802
SHA256

31e5695142fbf20e1e6cb7508cf627dc3710feb704a379aa8433c6d368411b4c
SHA512

b8b9dd955b23882ee688bc6be5682dfb40257188e210bf14ca985eab4c5ea50cf4b35099f00963aa86d960b958d8b9be8722bb754b07f934703b93e2d63ac991
SSDEEP

1536:paUumqa3M3L49TB2UooFLOY4OVtQSI1CSi6SFjBb/Db91P0:YU7qhc9TcU9ObOVtQStNhBx1P0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f63ec5a484c991a42576cd974ca8e2fd_JaffaCakes118

Files

f63ec5a484c991a42576cd974ca8e2fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f2a35d07197a1c8575ed9d7db4506e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegEnumValueA
RegOpenKeyW
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegEnumValueW
RegQueryValueW
RegDeleteValueA
RegQueryValueA
RegEnumKeyExW
RegEnumKeyW
RegLoadKeyA
RegCreateKeyExW
RegReplaceKeyA
RegCreateKeyW

comctl32

InitCommonControls
ImageList_GetImageInfo
ImageList_AddIcon
ImageList_BeginDrag
ImageList_LoadImageA
ImageList_DragMove
ImageList_LoadImage
ImageList_AddMasked
ImageList_Destroy
ImageList_DrawIndirect
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_Create
ImageList_Merge
ImageList_Draw

user32

GetFocus
BlockInput
GetWindowTextLengthA
DialogBoxParamW
CreateIcon
InsertMenuA
GetCursor
GetDC
LoadCursorA
CopyIcon
CloseWindow
AlignRects
IsMenu
GetWindowTextA
GetDlgItem
CalcMenuBar
DrawTextA
LoadMenuA

kernel32

CreateThread
WriteFile
CreateDirectoryA
FindFirstFileA
OpenFileMappingA
ReadConsoleA
CopyFileA
ExitThread
GetCommandLineA
SetLastError
DeleteAtom
GlobalFree
GetLastError
OpenFile
CopyFileW
GetStdHandle
FindAtomA
GetCPInfo
CopyFileExW
ReadFile

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f2a35d07197a1c8575ed9d7db4506e8

Headers

File Characteristics

Imports

advapi32

comctl32

user32

kernel32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 64KB - Virtual size: 159KB

.reloc Size: - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 64KB - Virtual size: 159KB

.reloc
Size: - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 2KB