094924db0649bb98afd9b6a397f80e15_JaffaCakes118

General

Target

094924db0649bb98afd9b6a397f80e15_JaffaCakes118
Size

18KB
MD5

094924db0649bb98afd9b6a397f80e15
SHA1

6a33a7c803f54d793f32ec95b3e1af8d57f70e0c
SHA256

3d91b20213d2427af34c79cc7dc165e7fdbb94c65bea014f0dca9a90c4bcce2e
SHA512

b987a07ce3e60a70cf4bd3e2a62debd6e8c2ca5db2d32bb055094a491d0f2a537596c3bba1e2a9d79bc35a7858cdbdba38739f81f8cf99479a25e17b5ccee2a6
SSDEEP

384:ILIJpWc/BQtcThNAsQryPsfffffffffffffffffffffffffffffffffffffffffR:mc/KV3OPRFXU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
094924db0649bb98afd9b6a397f80e15_JaffaCakes118

Files

094924db0649bb98afd9b6a397f80e15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f175b76d7949569b81bf216c1d46881c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
SendMessageA
RegisterClassExA
UpdateWindow
LoadCursorA
GetSystemMetrics
GetMessageA
GetDlgItemTextA
EndPaint
MessageBoxA
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint

kernel32

CreateFileA
CreateMutexA
CloseHandle
ExitProcess
FindClose
FindFirstFileA
DeleteFileA
CopyFileA
GetCommandLineA
GetEnvironmentVariableA
GetFileSize
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GlobalAlloc
GlobalFree
MoveFileA
OpenMutexA
ReadFile
SetErrorMode
SetFilePointer
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
FindNextFileA

shell32

ShellExecuteA

advapi32

CryptAcquireContextA
CryptGetHashParam
CryptHashData
CryptCreateHash
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
CryptReleaseContext
CryptDestroyHash

shlwapi

PathFindFileNameA

gdi32

CreateFontIndirectA

comctl32

InitCommonControls

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f175b76d7949569b81bf216c1d46881c

Headers

File Characteristics

Imports

user32

kernel32

shell32

advapi32

shlwapi

gdi32

comctl32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 11KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 11KB

.rsrc
Size: 7KB - Virtual size: 7KB