10931c4c4bcd9a50c47bc450d40b8f4f_JaffaCakes118

General

Target

10931c4c4bcd9a50c47bc450d40b8f4f_JaffaCakes118
Size

76KB
MD5

10931c4c4bcd9a50c47bc450d40b8f4f
SHA1

4ce13ef17f86fb70bb2594242595ad89de43ccde
SHA256

d0ca509652467a79eed759fdff626cc50e8b651680c1ef9879739e74cce3249b
SHA512

1d1bfeeda6acbabcce17d7174aedb596a88e225640bbe8a6b3255a93145fdfe6d01f18ab637e97562370deba188662f935aa61e61d04390db8cd62475ff71d48
SSDEEP

1536:Y4/uzYZqm+uI7rfLXmoQW9AD8GXN+I7fJ+aCl1feZ:RvQLXmoQW2zoI7h+aS1GZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10931c4c4bcd9a50c47bc450d40b8f4f_JaffaCakes118

Files

10931c4c4bcd9a50c47bc450d40b8f4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a51d35539ee3b3d21bd6881beb83146c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
HeapFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
IsBadCodePtr
IsBadReadPtr
HeapSize
GetStringTypeW
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetStringTypeA
ReadFile
MultiByteToWideChar
GetOEMCP
GetACP
GetProcAddress
FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
GetLastError
CloseHandle
UnhandledExceptionFilter
GetModuleFileNameA
HeapCreate
GetCPInfo
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
VirtualAlloc
VirtualFree
RtlUnwind
WriteFile
HeapReAlloc
IsBadWritePtr
SetFilePointer
SetStdHandle

user32

RegisterClassExA
LoadStringA
DialogBoxParamA
LoadCursorA
LoadIconA
EndDialog
DestroyWindow
GetDlgItemTextA
DefWindowProcA
DrawTextA
BeginPaint
GetClientRect
CreateWindowExA
EndPaint
PostQuitMessage

advapi32

RegSetValueExA
RegOpenKeyExA
RegEnumValueA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a51d35539ee3b3d21bd6881beb83146c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 40KB - Virtual size: 39KB