0ec5cf635ab93179af8792fa57e7ee26_JaffaCakes118

General

Target

0ec5cf635ab93179af8792fa57e7ee26_JaffaCakes118
Size

149KB
MD5

0ec5cf635ab93179af8792fa57e7ee26
SHA1

6778182b507d347f4a710640a776c1ece5dee4f9
SHA256

f89d030950edc6a1056a0fa735c9720ea1815c149abc055735ae851b2ca1900d
SHA512

f564c85e70438dc7e3b966f80d984d9e648247f27ceb30d86947d9d65f0d6a4dbcf74672a305167983c9537c404ddc4d4a27b820fa7a4d41e16a7d4251baee36
SSDEEP

1536:bDVEyXLL8CWIxW/fpFnKjPu7cmoaTrbDreMInPSbKr2ISO1CHnMXYEc:bDiyECq/fDnKjPu72EriPSw2i87

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec5cf635ab93179af8792fa57e7ee26_JaffaCakes118

Files

0ec5cf635ab93179af8792fa57e7ee26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04352f2a99a2d7cc1fd847f97ad7d909

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

user32

EndDialog
CharUpperA
GetDlgItem
SetWindowTextA
DialogBoxParamA
SetDlgItemTextA
SendMessageA
MessageBoxA
EnableWindow

comdlg32

GetOpenFileNameA

msvcrt

_findnext
remove
_findfirst
_getcwd
_findclose
_beginthread
_makepath
_mkdir
_splitpath
strncpy
toupper
fscanf
getenv
fgetc
free
malloc
strchr
fputc
strrchr
realloc
rewind
strncmp
fread
sprintf
__argv
fseek
fopen
memmove
fwrite
_errno
tolower
_msize
qsort
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fprintf
fclose
calloc
ftell
sscanf
_stricmp
_rmdir
_chdir

kernel32

SetFileAttributesA
GetStartupInfoA
DosDateTimeToFileTime
FileTimeToDosDateTime
CompareFileTime
WideCharToMultiByte
LocalFileTimeToFileTime
SetFileTime
GetLocalTime
SystemTimeToFileTime
CreateFileA
GetFileTime
FileTimeToLocalFileTime
GetPrivateProfileIntA
GetModuleHandleA
GetModuleFileNameA
GetCurrentDirectoryA
CloseHandle

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

04352f2a99a2d7cc1fd847f97ad7d909

Headers

File Characteristics

Imports

shell32

user32

comdlg32

msvcrt

kernel32

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 96KB

.rsrc Size: 3KB - Virtual size: 3KB

.wrdata Size: 60KB - Virtual size: 60KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 96KB

.rsrc
Size: 3KB - Virtual size: 3KB

.wrdata
Size: 60KB - Virtual size: 60KB