2df67626421f0d4fd96bfd487596af17_JaffaCakes118

General

Target

2df67626421f0d4fd96bfd487596af17_JaffaCakes118
Size

7KB
MD5

2df67626421f0d4fd96bfd487596af17
SHA1

fe44872ddb2b2e3fc76fdb188691bc03e04f1a16
SHA256

b9f120a53c8345fbe88671ee832782f27cc1e63a3411d51de15c5844a6837632
SHA512

73918a2339e0d3de411478a18df97b001f5364387410d1ee7957e088c6fc098010734133fec9e3f03a95ed6c2a09e012fe2470bfce7981855ae94d0064bb874c
SSDEEP

96:hZdKs4YkzWFM/rrbDO9uQdIPdADfSg3PZ7qW430b7Dbx:hZIfYsWFMjXD+fyPdADfSAPZ79WgHb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2df67626421f0d4fd96bfd487596af17_JaffaCakes118

Files

2df67626421f0d4fd96bfd487596af17_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1abf1a38073a735c2068f6977d268365

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IsWindow
PostMessageA
UnregisterClassA
LoadCursorA
RegisterClassExA
wsprintfA
wvsprintfA

imm32

ImmLockIMC
ImmUnlockIMC

advapi32

RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey

shell32

SHGetFolderPathA

msvcrt

_adjust_fdiv
strcat
strrchr
_except_handler3
strcpy
memset
free
_initterm
malloc

kernel32

Sleep
OutputDebugStringA
GetModuleFileNameA
GetCurrentThreadId
LoadLibraryA

Exports

Exports

CandWndProc
CompWndProc
IMEClearPubString
IMESetPubString
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mysechx
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1abf1a38073a735c2068f6977d268365

Headers

File Characteristics

Imports

user32

imm32

advapi32

shell32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 92B

mysechx Size: 512B - Virtual size: 20B

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 512B - Virtual size: 240B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 92B

mysechx
Size: 512B - Virtual size: 20B

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 512B - Virtual size: 240B