fbb65f1aa413e70716540e26c04151f1_JaffaCakes118

General

Target

fbb65f1aa413e70716540e26c04151f1_JaffaCakes118
Size

179KB
MD5

fbb65f1aa413e70716540e26c04151f1
SHA1

ebbd360f320b4db5f66e373d391b3e2961af1fba
SHA256

7f8e7315127e5ab34a61329780c392c3ae3f6eaddd61cdb2d9455b0e6e221216
SHA512

ffe7d20abd0b2b96b21a77f67b821e56f4539b993540bd2d0dc7bcf98f877f968082d1cb285df4dc756bb2e75066fbea400772ee06d269c7a69e4ad465f7b24c
SSDEEP

3072:VfG21BTr/SXJUSHET6DUpdSNR/41JT31nHzJ6HK:95BTr6XrkT6DWrJTlTJ6q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbb65f1aa413e70716540e26c04151f1_JaffaCakes118

Files

fbb65f1aa413e70716540e26c04151f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc5b53e15398eb02c63ad42ffbf42e88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegOpenKeyExA
RegOpenKeyW
RegSetValueExW

kernel32

CloseHandle
CreateFiber
ExitProcess
GetFileSize
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
WriteFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
memset
signal
strcpy
wcscpy

user32

BeginPaint
CheckMenuRadioItem
ChildWindowFromPoint
CloseClipboard
CreateDialogParamW
DestroyIcon
DestroyMenu
DrawIcon
EndDeferWindowPos
EnumDisplaySettingsW
GetClassNameW
GetClipboardData
GetDesktopWindow
GetSysColor
GetWindow
GetWindowTextLengthW
IsClipboardFormatAvailable
IsWindowEnabled
IsWindowVisible
LoadBitmapW
MapWindowPoints
PostQuitMessage
RegisterClassW
ScreenToClient
SetClipboardData
SetWindowTextW
TrackPopupMenu

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc5b53e15398eb02c63ad42ffbf42e88

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 108B

.idata Size: 2KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 544B

.bss Size: - Virtual size: 36KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 108B

.idata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 544B

.bss
Size: - Virtual size: 36KB

.rsrc
Size: 3KB - Virtual size: 3KB