f9a88c6b1ddd69d4b449c767810410ed_JaffaCakes118

General

Target

f9a88c6b1ddd69d4b449c767810410ed_JaffaCakes118
Size

244KB
MD5

f9a88c6b1ddd69d4b449c767810410ed
SHA1

deca5bc0915f10edcc61d8fc100e7ce1dd9b10c9
SHA256

cdca8df7861bff04ada9746857c871aac032eb2b97df329fc56c0c96e161e005
SHA512

4bb7d7529bc9a2f4bc795607f65c463d88ba926be28361d4bcb41d56de06dd29a945958073f572c771c716067672ca57a4912e8bae2f5702c34025882efdf631
SSDEEP

6144:akQIq93CcOFZyGIsvZCg92wRsxf9iV44+zvVxRf0rKLO2:akQB9CzFZdIsvZCm12QI7R0rU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9a88c6b1ddd69d4b449c767810410ed_JaffaCakes118

Files

f9a88c6b1ddd69d4b449c767810410ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15211ba630d6a1adb88935645be30943

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
HeapDestroy
HeapCreate
FlushConsoleInputBuffer
VirtualFree
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapReAlloc
GetTimeZoneInformation
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA

user32

SendDlgItemMessageW
IsDialogMessageW
SetWindowTextW
MoveWindow
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
CallWindowProcW
DefWindowProcW
PtInRect
DeferWindowPos
ScreenToClient
RegisterClassW
GetClassInfoExW
CreateWindowExW
MessageBoxW
GetClientRect
SetForegroundWindow
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageW
GetForegroundWindow

oleaut32

DispGetIDsOfNames
DispGetIDsOfNames
SafeArrayRedim
CreateErrorInfo
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

comdlg32

GetFileTitleW

oledlg

OleUIBusyW

Sections

.text
Size: 161KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

15211ba630d6a1adb88935645be30943

Headers

File Characteristics

Imports

kernel32

user32

oleaut32

comdlg32

oledlg

Sections

.text Size: 161KB - Virtual size: 184KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 80KB - Virtual size: 80KB

.text
Size: 161KB - Virtual size: 184KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 80KB - Virtual size: 80KB