13c1a442db650bf4c65e23bfee0edced_JaffaCakes118

General

Target

13c1a442db650bf4c65e23bfee0edced_JaffaCakes118
Size

554KB
MD5

13c1a442db650bf4c65e23bfee0edced
SHA1

b5b790e43f1ca2c8f7f49248e85eee47ee51c8a7
SHA256

dfe77bb2ebf64ed3ca444b25fdd81320a72d2b7181223c6db1ae3e6408852849
SHA512

98e9eed70420383e7b987d7cb31f8d605fbdc223916928d4749c2ab7534ea3250332005aa224482549959ed398e80fed29f8a36282b0b52fe17895947564e306
SSDEEP

12288:5yhpai6XsLbHWESWbFlB/5Gx2iPL799mZG6FSu7NQCLlAXp:5Mp2s3WESmFll5kfPjmLLlAXp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13c1a442db650bf4c65e23bfee0edced_JaffaCakes118

Files

13c1a442db650bf4c65e23bfee0edced_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee6865a7bedd2d49d706e5100b2625c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleCount
TerminateProcess
GetStringTypeA
GetCPInfo
SetFilePointer
GetVersion
lstrcatA
MultiByteToWideChar
lstrcpynW
WriteFile
LCMapStringW
GetStartupInfoA
GetACP
CreateFileA
GetStdHandle
GetCurrentProcess
GetStringTypeW
lstrcpyA
GetFileType
GetCommandLineA
lstrcpynA
GetModuleFileNameA

user32

DrawIconEx
CopyRect
LoadCursorA
GetDlgItem
DrawTextA
EndDialog
IsWindow
GetWindowTextA
DrawTextW
GetWindowTextLengthA
CopyImage
LoadMenuA
IsMenu
CreateIcon
GetMenu
GetFocus
DialogBoxParamW
DrawIcon
CloseWindow
GetCursor
GetDC
InsertMenuA
CopyIcon
DialogBoxParamA

comctl32

CreateStatusWindow
ImageList_Create
ImageList_Add
DrawStatusText
CreateStatusWindowW
ImageList_Copy
ImageList_GetIconSize
ImageList_DrawEx
InitCommonControls
ImageList_GetIcon
DrawStatusTextW

advapi32

RegDeleteValueA
RegQueryValueA
RegOpenKeyW
RegEnumKeyA
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyA
RegEnumValueA
RegCreateKeyW
RegEnumKeyExA
RegOpenKeyExA
RegSetValueW
RegDeleteValueW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 16.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee6865a7bedd2d49d706e5100b2625c9

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 50KB - Virtual size: 16.5MB

.rsrc Size: 25KB - Virtual size: 28KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 50KB - Virtual size: 16.5MB

.rsrc
Size: 25KB - Virtual size: 28KB