fffe9537dd987223a579ee7688403cc0_JaffaCakes118

General

Target

fffe9537dd987223a579ee7688403cc0_JaffaCakes118
Size

2.1MB
MD5

fffe9537dd987223a579ee7688403cc0
SHA1

39fbaaffaa017ad7e6e9676f94e1ac6a8d58100c
SHA256

ff8217690c293c752ccb38c7705f0fd7af5d6676ba27f136fe9c714ca64d55ee
SHA512

e71b2c223c13fe0269fd711901b9e2a57048041c242a662c01ac0c15bee3b26713884fb9677b35693d14c0b7ca24f6c4044482b498ec393d86c50915c20ceaaa
SSDEEP

49152:xFBFkVU9NI+PxeMwr074VGA19DORItCqROZM8:vBdzM47q9DOdd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fffe9537dd987223a579ee7688403cc0_JaffaCakes118

Files

fffe9537dd987223a579ee7688403cc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d701a0a32bcde2fd133e4c16a533c282

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalAppExitA
LocalReAlloc
GlobalAddAtomW
SetProcessShutdownParameters
GetVersion
GetFileInformationByHandle
GetNumberFormatW
GetFullPathNameA
VirtualFree
Beep
OpenSemaphoreW
ExitThread
SetStdHandle
GetTickCount
GetFileType
CreateEventA
WritePrivateProfileSectionA
EnumDateFormatsW
GetProfileIntA
ReadDirectoryChangesW
FileTimeToLocalFileTime
ReadConsoleOutputA
ExpandEnvironmentStringsW
ClearCommBreak
CopyFileExW
PurgeComm
FindFirstFileExW
GetHandleInformation
ExitProcess

user32

EnumThreadWindows
CharToOemBuffA
GetMenuItemRect
CreateIconIndirect
DefDlgProcA
IsWindowUnicode
SetCaretPos
ChildWindowFromPoint
SetForegroundWindow
DrawStateW
GetMessageA
DrawAnimatedRects
SetCaretBlinkTime
CheckMenuRadioItem

gdi32

Chord
SetROP2
SetMetaFileBitsEx
GetMetaFileBitsEx
GetDCOrgEx
RemoveFontResourceA
GetCharWidth32W
CreatePalette
StretchDIBits
GetEnhMetaFileDescriptionA

comdlg32

ReplaceTextA
CommDlgExtendedError

Sections

.text
Size: 32KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d701a0a32bcde2fd133e4c16a533c282

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 32KB - Virtual size: 249KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 32KB - Virtual size: 249KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 17KB - Virtual size: 16KB