09665cdb13bfb6b15298457871272473_JaffaCakes118

General

Target

09665cdb13bfb6b15298457871272473_JaffaCakes118
Size

183KB
MD5

09665cdb13bfb6b15298457871272473
SHA1

9a85d8edd95a0fbb42536fda0e609165c34ef563
SHA256

da8629fbcf5d65fe5de7d91440f065b67b5fa75999accab4281562b78571e775
SHA512

61f45f8c3d7bd39309abff3f0c9b3fc2a156ccab653495c2f406711baba2f61feea8f2159d95f5fe155e91fa4b99f45aec333fb0541fb98da793baa42e435d3d
SSDEEP

3072:3Wq+qH+1j2XpGZLfLaviPZnbq+tNR+cEY+muCAxcNEqAHw6E:3Wq+e6jEpwf+vONTYfmu5xcNEo6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09665cdb13bfb6b15298457871272473_JaffaCakes118

Files

09665cdb13bfb6b15298457871272473_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b50b57acbc3ed9d0a3590911a62f3a6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
KillTimer
GetWindowLongW
GetWindowDC
IsZoomed
GetWindowLongA
IsWindowVisible
GetTopWindow
IntersectRect
IsDialogMessageA
InvalidateRect
GetSysColorBrush
IsChild
GetWindow
GetSubMenu
InsertMenuA
InsertMenuItemA
IsIconic
GetSystemMenu
GetWindowPlacement
IsRectEmpty
IsWindow
IsWindowUnicode
InflateRect
IsWindowEnabled
GetSysColor
GetWindowThreadProcessId
IsDialogMessageW
GetWindowTextA
GetScrollRange

kernel32

GetLastError
GetACP
GetModuleHandleA
ExitProcess
VirtualAlloc
IsBadHugeReadPtr
GetCommandLineW
ExitThread
GetCommandLineA
lstrlenA
GetProcAddress
lstrlenW
LoadLibraryExA
GetOEMCP

shlwapi

SHGetValueA
PathGetCharTypeA
PathFileExistsA
SHQueryInfoKeyA
SHEnumValueA
SHDeleteValueA
SHStrDupA
SHDeleteKeyA
SHSetValueA
SHQueryValueExA

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b50b57acbc3ed9d0a3590911a62f3a6c

Headers

File Characteristics

Imports

user32

kernel32

shlwapi

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 108KB - Virtual size: 195KB

.adata Size: 2KB - Virtual size: 1KB

DATA Size: 9KB - Virtual size: 8KB

.hdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 836B

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 108KB - Virtual size: 195KB

.adata
Size: 2KB - Virtual size: 1KB

DATA
Size: 9KB - Virtual size: 8KB

.hdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 836B