291752c26a8451a752a1a35a3040df1b_JaffaCakes118

General

Target

291752c26a8451a752a1a35a3040df1b_JaffaCakes118
Size

62KB
MD5

291752c26a8451a752a1a35a3040df1b
SHA1

6dc237c6e92477b0137977e5e59f88db827423c8
SHA256

bc8a9a97134fa9a5b4007a25d88d9132bcc319642d486f392b8c3fe9c2a6080e
SHA512

0767c64b732d851282d107ae47ac4d8d62bf36e6a134a631f8af3ea7574771bf391b12e9f87689eccdcad72f432f7650eb7ea27de35425ec4e51bbe6e70903b5
SSDEEP

1536:aGPegsVpDKNSf+owoS9Po8TwYwMPtd/BqDIkp:ldCpKM+oGBbw6td/BWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291752c26a8451a752a1a35a3040df1b_JaffaCakes118

Files

291752c26a8451a752a1a35a3040df1b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3297f6daf3f7338bfe0a45be886ec9e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextA
FillRect
GetCapture
GetWindowLongA
GetMenuItemCount
GetWindowDC
ChangeMenuA
GetDC
GetClientRect
GetForegroundWindow
SetFocus
GetDlgCtrlID
GetWindow
CheckDlgButton
GetMessagePos
GetSysColorBrush
EndPaint
SetWindowLongW
GetActiveWindow
DragObject
GetParent

ole32

CoCreateInstance
GetHGlobalFromStream
OleSaveToStream
StringFromGUID2
CoSetProxyBlanket
StgCreateDocfileOnILockBytes
OleRegGetUserType
ProgIDFromCLSID
BindMoniker

kernel32

GetExitCodeThread
GetCurrentProcessId
lstrlenW
SetHandleCount
OpenMutexA
IsValidCodePage
ExitProcess
GetOEMCP
IsDBCSLeadByte
lstrcatW
DeleteFileA
GetLastError
VirtualAlloc
FindResourceA
DeleteFileW
GetFileAttributesA
OutputDebugStringA
GetCurrentThreadId
SetUnhandledExceptionFilter
GlobalLock
GetLocalTime

msvcrt

__p__osver
isalpha
wcsrchr
__p__iob
time
__p__commode
rand
_ltow
malloc
swprintf
qsort
__set_app_type
_finite
__setusermatherr
swscanf
wcsncmp
_rotl
srand
atoi
wcsncpy
__wgetmainargs
__p__fmode
_exit

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 485B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3297f6daf3f7338bfe0a45be886ec9e0

Headers

File Characteristics

Imports

user32

ole32

kernel32

msvcrt

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 26KB - Virtual size: 87KB

.reloc Size: 512B - Virtual size: 485B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 26KB - Virtual size: 87KB

.reloc
Size: 512B - Virtual size: 485B