08aa65640fba4f27f0db071dc3dcb834_JaffaCakes118

General

Target

08aa65640fba4f27f0db071dc3dcb834_JaffaCakes118
Size

28KB
MD5

08aa65640fba4f27f0db071dc3dcb834
SHA1

a8d870d4c034e52322a96fbac6359c5f37ef4b15
SHA256

e96da438a0e2b108e3a4485d3c9cce5c9438734796df2717bdf48add269850e9
SHA512

802ebc2029cc95fbd3a8ff409e6f0c8392a6aa42c1c3ee6c0fe136851dc4e5c3f081ec34b61af7c5f3e4227feb15224bb711d375257b241a26f60c31b02fe666
SSDEEP

384:lihsEv3B3zbFCdIQrGYD5WSnMzd5fjFY97KJ7kchn4G4:lEsQsdIj05WSMzd5r+xAz4G4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08aa65640fba4f27f0db071dc3dcb834_JaffaCakes118

Files

08aa65640fba4f27f0db071dc3dcb834_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e0d73f464ddba9fa9cccae61ff19d56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GlobalFree
GetStdHandle
WriteFile
DeleteFileW
CopyFileW
GetFileTime
GetLastError
GetCPInfo
CreateThread
CreateDirectoryA
FindFirstFileA
CreateProcessA
OpenFileMappingA
OpenFile
CopyFileExA
DeleteFileA
GetFileSize
ReadConsoleA

comctl32

ImageList_Replace
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Read
ImageList_Copy
ImageList_DragShowNolock
ImageList_Remove
ImageList_Merge
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_AddIcon
ImageList_DragEnter
ImageList_LoadImageW
ImageList_Draw
ImageList_AddMasked
ImageList_DragLeave

gdi32

AddFontResourceW
DeleteObject
AddFontResourceExA
SetTextColor
BitBlt
ExtTextOutA
AddFontResourceTracking
ClearBrushAttributes
AddFontResourceA
GetBitmapBits
CreateSolidBrush
CancelDC
GetClipBox
AddFontResourceExW
GetPixel
AddFontMemResourceEx
DeleteDC
GetBrushOrgEx
CopyMetaFileA
GetCurrentPositionEx
ClearBitmapAttributes

advapi32

RegDeleteValueA
RegReplaceKeyA
RegReplaceKeyW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryValueA
RegQueryValueW
RegDeleteValueW
RegGetKeySecurity
RegDeleteKeyA
RegOpenKeyA
RegEnumValueW
RegCreateKeyExW
RegQueryInfoKeyA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e0d73f464ddba9fa9cccae61ff19d56

Headers

File Characteristics

Imports

kernel32

comctl32

gdi32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 5.1MB

.rsrc Size: 1024B - Virtual size: 780B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 5.1MB

.rsrc
Size: 1024B - Virtual size: 780B