25f992691bd3b671897218cf6deca8aa_JaffaCakes118

General

Target

25f992691bd3b671897218cf6deca8aa_JaffaCakes118
Size

129KB
MD5

25f992691bd3b671897218cf6deca8aa
SHA1

0e78d6ec119607959797335c7106631fbc97a81e
SHA256

0dc8dd774d3edd7a1b74ca2d34fdc106153f552ca96de22a7d3f7114ba3ff002
SHA512

52a0382d361b8be1536ac6577bb4a49c1a44ba84424d631e074502376384789d44bfb93d6c8f0042306535a2a1a14a2b4f2b05a6a6fcab8c03fcf1b8e2dbe350
SSDEEP

3072:PFvp09A1Wrfik5o+kGQLttReZhJInesHZ15tHm37zM8:Pw9WeKk5o7GsfWhOesHZ1m7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25f992691bd3b671897218cf6deca8aa_JaffaCakes118

Files

25f992691bd3b671897218cf6deca8aa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

36b0297e4fe682cff7cc15f26e0cc3c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
EndDialog
IntersectRect
GetCursorPos
GetMenu
GetPropW
GetSubMenu
MessageBoxW
CheckDlgButton
AdjustWindowRectEx
IsDialogMessageW
DeleteMenu
GetScrollPos
RemoveMenu
GetDesktopWindow

msvcrt

__doserrno

kernel32

SetCurrentDirectoryA
UnlockFile
InterlockedExchange
GetACP
SetEvent
LeaveCriticalSection
LocalFileTimeToFileTime
FreeLibrary
GlobalHandle
GetVersionExA
GetThreadLocale
GetCurrentThreadId
VirtualAlloc
GetDriveTypeA
GetDateFormatA
GetStringTypeW
GetProcessHeap
GetModuleFileNameW
WritePrivateProfileStringW
MulDiv
GlobalAlloc
LockFile
GetDriveTypeW
GlobalLock
GetPrivateProfileIntW
GetStartupInfoA
GetModuleFileNameA
SystemTimeToFileTime

comdlg32

GetOpenFileNameA
PrintDlgA

crypt32

CryptUnregisterOIDInfo

ws2_32

WSAGetLastError

Sections

.text
Size: 1024B - Virtual size: 551B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

36b0297e4fe682cff7cc15f26e0cc3c3

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvcrt

kernel32

comdlg32

crypt32

ws2_32

Sections

.text Size: 1024B - Virtual size: 551B

.rsrc Size: 122KB - Virtual size: 122KB

.data Size: 1KB - Virtual size: 224KB

.rdata Size: 3KB - Virtual size: 2KB

.text
Size: 1024B - Virtual size: 551B

.rsrc
Size: 122KB - Virtual size: 122KB

.data
Size: 1KB - Virtual size: 224KB

.rdata
Size: 3KB - Virtual size: 2KB