137ba40c4cd42777df627110cf629dc7_JaffaCakes118

General

Target

137ba40c4cd42777df627110cf629dc7_JaffaCakes118
Size

20KB
MD5

137ba40c4cd42777df627110cf629dc7
SHA1

2369244908f23181d387998c85aa059df883919f
SHA256

06dc9606dfe813487f1cf58b4633f65c28763e6356c0a9218f8cf7a89e7866f8
SHA512

ee2c64df8c864c25f60be038b0c7c6990fa006f1ce9c4d154f3cdcd077cdbf318e75af9036ce91503fc8d00aca2c6346237e40b28c590d0a0b78eb4a29e37502
SSDEEP

384:nVjyv5bjFZVet6b4VJE6am5gPTwCH+JEsTEk/e/mQR7:UPVO6bX6amiL+3PWmQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
137ba40c4cd42777df627110cf629dc7_JaffaCakes118

Files

137ba40c4cd42777df627110cf629dc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e735ffa6f6e3c3cf76c0a6107fba08a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RemoveMenu
EqualRect
DefWindowProcW
GetSysColor
GetMenuItemID
GetSystemMetrics
GetClassLongW
SystemParametersInfoA
SetWindowPlacement
BeginPaint
IsDlgButtonChecked
RegisterClassW
SetDlgItemTextW
IsWindowVisible
SetWindowPos

ws2_32

WSAGetLastError

crypt32

CryptSignAndEncodeCertificate

kernel32

HeapAlloc
lstrcmpiW
GetProcessHeap
WaitForSingleObject
GetFileAttributesW
CreateProcessW
CreateEventW
GetUserDefaultLCID
SetLastError
VirtualAlloc
CopyFileW
FindNextFileW
GlobalAlloc
GetFullPathNameW
HeapFree
FindClose
GetShortPathNameW
GlobalFree
MulDiv
HeapReAlloc
GetLastError
Sleep
CloseHandle
WideCharToMultiByte
lstrlenA
GetVersionExW
ResetEvent
GetFileAttributesA

comdlg32

PrintDlgA
GetOpenFileNameA

msvcrt

__doserrno

rpcrt4

RpcImpersonateClient
RpcStringFreeW
RpcStringFreeA
NdrClientCall2

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e735ffa6f6e3c3cf76c0a6107fba08a1

Headers

File Characteristics

Imports

user32

ws2_32

crypt32

kernel32

comdlg32

msvcrt

rpcrt4

Sections

.text Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 24B

.data Size: 512B - Virtual size: 72KB

.rdata Size: 5KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 24B

.data
Size: 512B - Virtual size: 72KB

.rdata
Size: 5KB - Virtual size: 4KB