16ad6ef1c39d6e3e5b47d50e7d7806bd_JaffaCakes118

General

Target

16ad6ef1c39d6e3e5b47d50e7d7806bd_JaffaCakes118
Size

13KB
MD5

16ad6ef1c39d6e3e5b47d50e7d7806bd
SHA1

a10acbfb2dd292ce2f4c1b1e3b98479ad946add4
SHA256

ad370c2d3554dbd17b74fac6132ff0fcb9da29fd27dcf3ccd6ced363e9dd15ae
SHA512

854569425283805e2d9a823c1192d72dfa0d2c9786aa0d2ef49fa98e0035d1061aa1bf3882ceea2ccb87bc686972038ffa622926e2e4086613f6cfc28124d252
SSDEEP

192:UFfZGoaKlYWpj/O4T/Ml5jlvf5sgdD0yIyI/3eGyi+lokpBCjpAhwljr4rSbWEgW:yfPmr1lvrDyu1iyCjpEwJmYWEgW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ad6ef1c39d6e3e5b47d50e7d7806bd_JaffaCakes118

Files

16ad6ef1c39d6e3e5b47d50e7d7806bd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

081aad1f1cdc17bccd2f8287346a25d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA

kernel32

FreeLibrary
CreateProcessA
LoadLibraryA
GetSystemInfo
ExitProcess
GetCommandLineA
GetStartupInfoA
CloseHandle
lstrcmpiA
GetWindowsDirectoryA
CreateEventA
LocalFree
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
lstrcatA
lstrlenA
GetACP
GetVersionExA
ResetEvent

user32

EnumWindows
GetClassNameA
FindWindowA
PostMessageA
SetTimer
KillTimer
TranslateMessage
DispatchMessageA
PeekMessageA
GetMessageA
SetWindowPos
GetSystemMetrics
LoadCursorA
RegisterClassExA
DefWindowProcA
PostQuitMessage
CreateWindowExA
MsgWaitForMultipleObjects

msctf

TF_InvalidAssemblyListCache
TF_InvalidAssemblyListCacheIfExist
TF_UninitSystem
TF_InitSystem
TF_CreateCicLoadMutex
TF_PostAllThreadMsg

msutb

GetPopupTipbar
ClosePopupTipbar

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

081aad1f1cdc17bccd2f8287346a25d7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msctf

msutb

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 464B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 464B

.rsrc
Size: 2KB - Virtual size: 2KB