0668bb6f74eefc7affd5f9b4a5a7aba0_JaffaCakes118

General

Target

0668bb6f74eefc7affd5f9b4a5a7aba0_JaffaCakes118
Size

95KB
MD5

0668bb6f74eefc7affd5f9b4a5a7aba0
SHA1

40c50cf9c1849c580eca133eca7d7d13436fbe35
SHA256

d05611eaa3b5f6c00efc0ee8875b2e68ffd55362749610ba099ec6c28a1902b1
SHA512

25557d7d326af94711bdef192e919f62eaa42e0e95a071445df6539b55d0bc2448218fe4e205ec6491ed9eaa992c6e564ac2582554a3e0de9f1f82db045c6add
SSDEEP

1536:sGncKWmXbX075M2V2f+ffGQzRbtFO2616isN:sMFBLk75M2V2fS+Qtbt4u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0668bb6f74eefc7affd5f9b4a5a7aba0_JaffaCakes118

Files

0668bb6f74eefc7affd5f9b4a5a7aba0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cac7bebecfec683b0469a59edbe38c48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
MessageBoxA
SendMessageA
GetSystemMetrics
GetMessageA
GetDlgItemTextA
EndPaint
TranslateMessage
UpdateWindow
LoadCursorA
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint

kernel32

CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeResource
GetCommandLineA
GetEnvironmentVariableA
GetFileSize
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetTempPathA
GlobalFree
HeapAlloc
LoadResource
LockResource
MoveFileA
ReadFile
RtlMoveMemory
SetErrorMode
SetFilePointer
SizeofResource
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

shell32

ShellExecuteA
SHGetSpecialFolderPathA

advapi32

RegCreateKeyExA
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
RegSetValueExA
RegDeleteKeyA
CryptAcquireContextA
RegCloseKey
CryptReleaseContext
CryptHashData

shlwapi

PathMatchSpecA
PathFindFileNameA
PathFindExtensionA

gdi32

CreateFontIndirectA

comctl32

InitCommonControls

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cac7bebecfec683b0469a59edbe38c48

Headers

File Characteristics

Imports

user32

kernel32

shell32

advapi32

shlwapi

gdi32

comctl32

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 11KB

.rsrc Size: 86KB - Virtual size: 85KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 11KB

.rsrc
Size: 86KB - Virtual size: 85KB