04b72bec4b17d416666a5907908964b2_JaffaCakes118

General

Target

04b72bec4b17d416666a5907908964b2_JaffaCakes118
Size

173KB
MD5

04b72bec4b17d416666a5907908964b2
SHA1

9c0d84ea86cb09c75b6cd8b6de97b1385506517b
SHA256

c0e4d0880105143f288c06fa233535cdd3e3db1f4d50efccb12131eb313667c7
SHA512

31849f96a328619d20becfbcc850d796af79167f6adf37fd87926b485d07270ea353bf4f9b7246dc83b38f7c93a591dd2a9801dd0cb5cf85991a2b33ae1cfc06
SSDEEP

3072:I8ZN/fBZ3LnDDWUkQUz3mdqa0/WM82v9f0gDMRAEAB:hfBVDkvaa/R82S9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b72bec4b17d416666a5907908964b2_JaffaCakes118

Files

04b72bec4b17d416666a5907908964b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3ee85144f8e894c09d79f07a808ecb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateDCW
LineTo
CreateDIBSection
CreateCompatibleDC
SetStretchBltMode
GetObjectType
StretchBlt
DeleteDC
CreatePen
SelectObject
BitBlt
CreateBitmap

winmm

timeGetTime

msimg32

AlphaBlend
TransparentBlt

user32

FindWindowA
DestroyMenu
ClipCursor
RedrawWindow
CreatePopupMenu
TrackPopupMenuEx
GetDesktopWindow

advapi32

RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW

ole32

CoUninitialize
StringFromGUID2
CoInitialize
CoFreeUnusedLibraries
CoCreateInstance

kernel32

FileTimeToDosDateTime
GetVersionExA
TransmitCommChar
LoadLibraryW
EnumResourceNamesW
ExitProcess
ExitProcess
LocalFree
LocalAlloc
GetModuleFileNameA

gdiplus

GdipGetImageWidth
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImagePixelFormat
GdipDisposeImage

comctl32

ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter

Sections

.text
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsr
Size: 512B - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3ee85144f8e894c09d79f07a808ecb8

Headers

File Characteristics

Imports

gdi32

winmm

msimg32

user32

advapi32

ole32

kernel32

gdiplus

comctl32

Sections

.text Size: 131KB - Virtual size: 130KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 39KB - Virtual size: 38KB

.rsr Size: 512B - Virtual size: 208KB

.text
Size: 131KB - Virtual size: 130KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 39KB - Virtual size: 38KB

.rsr
Size: 512B - Virtual size: 208KB