0443d35667838908b78d61ba22dbcc6e_JaffaCakes118

General

Target

0443d35667838908b78d61ba22dbcc6e_JaffaCakes118
Size

33KB
MD5

0443d35667838908b78d61ba22dbcc6e
SHA1

2d2ef114d76a96fb801990ba15f0cd3966683efa
SHA256

9b29bed193b8359021eee92d6e56790757839814da85e479bc77b5794bc6e20e
SHA512

fe654565da2e05ba8174bc050cb70e5631bc6fda3e83b7da3eecd895e1268538a8303077c6b2775d54581b82649299d6b7f56fd37172663b4af6f0f69bbaff78
SSDEEP

768:UGL6qoLtCeshLcDn6k6yLODJ762aQ4Sk4wn2x7k5:D6XtlshLFKsJbN4hw7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0443d35667838908b78d61ba22dbcc6e_JaffaCakes118

Files

0443d35667838908b78d61ba22dbcc6e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eba892da2a3c34a21c22c5c5f8316da7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit

kernel32

GetModuleHandleA
MultiByteToWideChar
SetErrorMode
LoadLibraryW
GetProcAddress
GetCurrentThreadId
FreeLibrary
GetStartupInfoA

gdi32

GetStockObject

user32

SetTimer
CloseWindowStation
GetProcessWindowStation
PostQuitMessage
SetProcessWindowStation
OpenInputDesktop
OpenDesktopW
DestroyWindow
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
UpdateWindow
ShowWindow
RegisterClassW
CreateWindowExW
OpenWindowStationW
KillTimer
MessageBoxW
GetFocus
LoadStringW
SetThreadDesktop
CloseDesktop
GetThreadDesktop

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wwrbsev
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eba892da2a3c34a21c22c5c5f8316da7

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

gdi32

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 120B

.rsrc Size: 28KB - Virtual size: 29KB

wwrbsev Size: - Virtual size: 4KB

.text
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 120B

.rsrc
Size: 28KB - Virtual size: 29KB

wwrbsev
Size: - Virtual size: 4KB