2785616a14eccd03eec6f17678c1e0c8_JaffaCakes118

General

Target

2785616a14eccd03eec6f17678c1e0c8_JaffaCakes118
Size

58KB
MD5

2785616a14eccd03eec6f17678c1e0c8
SHA1

6e94dd309b9487e2840d3ae051a0d851f9a19ba7
SHA256

1564fe0bc56bf0dfcba544c0b49a165e9b99198b6c5a449274587b0aa04e9509
SHA512

36912008fa72e42425bf89c22b1c87b92a69678c0029162fb893c30c6e4856c1eb7b948ec60085ad067205d07ba5f32fe4a306e6ef37eac64f4d25fdd7a8f0ec
SSDEEP

768:jxY6ioGVevZr5J13tuhyEDu564M2NKFG8L4yhtURFvU558alFaSKCLVLjiCO:jxYlo/D1dCytzJNKI9ItULvUT2ZII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2785616a14eccd03eec6f17678c1e0c8_JaffaCakes118

Files

2785616a14eccd03eec6f17678c1e0c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b758c0fe760980b3cb46ae019f908a26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetDateFormatA
HeapAlloc
GetStringTypeW
GetStringTypeA
GetFileType
lstrcmpA
Sleep
DeleteFileA
SetLastError
GetCommandLineA
GlobalFree
GetModuleHandleA
GetFileSize
HeapFree
GetLocalTime
CloseHandle
GetModuleFileNameA
lstrcmpiA
GetFileAttributesA

advapi32

RegOpenKeyA
RegEnumValueA
RegGetKeySecurity
RegQueryValueA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegCreateKeyExW
RegEnumKeyA
RegLoadKeyW
RegQueryValueExW
RegCreateKeyW
RegCreateKeyExA
RegReplaceKeyW

comctl32

ImageList_EndDrag
ImageList_Create
ImageList_AddIcon
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_Replace
ImageList_Remove
ImageList_LoadImageW
ImageList_Destroy
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_LoadImageA
ImageList_GetIcon
ImageList_GetDragImage
ImageList_AddMasked

user32

LoadCursorA
DrawIcon
BlockInput
GetDC
CreateIcon
CopyImage
DrawTextW
GetFocus
AppendMenuW
AppendMenuA
LoadMenuA
EndDialog
GetWindowTextLengthA
IsWindow
DrawIconEx
CopyIcon
GetWindowTextA
IsMenu
AlignRects
GetMenu

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 7KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xLuEhT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Nkcznd
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b758c0fe760980b3cb46ae019f908a26

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

user32

Sections

.text Size: 6KB - Virtual size: 5KB

.adata Size: 24KB - Virtual size: 23KB

.hdata Size: 7KB - Virtual size: 39KB

.xLuEhT Size: 2KB - Virtual size: 2KB

.Nkcznd Size: 1024B - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.adata
Size: 24KB - Virtual size: 23KB

.hdata
Size: 7KB - Virtual size: 39KB

.xLuEhT
Size: 2KB - Virtual size: 2KB

.Nkcznd
Size: 1024B - Virtual size: 1KB