3c3af1325c4a46ace48f1eaeff7668ff_JaffaCakes118

General

Target

3c3af1325c4a46ace48f1eaeff7668ff_JaffaCakes118
Size

131KB
MD5

3c3af1325c4a46ace48f1eaeff7668ff
SHA1

ea5d2b23fbcf6f2b6c2fd8ac27ae6ac218cdabab
SHA256

d04df4dff1eb1875f0b26b3db6b92e3b3fe20d2f40406365d574463ab2d6332d
SHA512

5ec77b0740c1c3b06a0b9a9dc99ad9362a743d4f2f0c14fa0544b1125aa37431491f62a136e20cf5924632474ead006010197b1fd5718c2085976df1a0337a9e
SSDEEP

3072:9B8DQQKCZ2xdxtUeG6qG3W+n3YZrItiZlB5YMc205:cMQt6M57Gpn6UiZlB5rFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c3af1325c4a46ace48f1eaeff7668ff_JaffaCakes118

Files

3c3af1325c4a46ace48f1eaeff7668ff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bc9b566bdfe48200fc8607680fbbe158

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW
ShellExecuteW

kernel32

HeapFree
SetLastError
CopyFileW
lstrcmpiW
GetShortPathNameW
GlobalAlloc
Sleep
FindFirstFileW
MulDiv
CreateProcessW
FindClose
GetUserDefaultLCID
GetFullPathNameW
CloseHandle
ResetEvent
GetVersionExW
WideCharToMultiByte
GetProcessHeap
FindNextFileW
WaitForSingleObject
HeapReAlloc
CreateEventW
GetFileAttributesW
GlobalFree
HeapAlloc
lstrlenA
GetFileAttributesA
VirtualAlloc

user32

TrackPopupMenu
GetMenuCheckMarkDimensions
GetCapture
SetScrollRange
GetMessageTime
LoadImageW
CharUpperW
FillRect
GetSysColorBrush
MoveWindow
GetPropW
PeekMessageW
GetLastActivePopup
LoadMenuW
ModifyMenuW

comdlg32

GetOpenFileNameA
PrintDlgA

rpcrt4

RpcBindingFree
RpcRevertToSelf
RpcBindingFromStringBindingW
UuidCreate

ws2_32

WSAGetLastError

crypt32

CryptSignAndEncryptMessage

msvcrt

__doserrno

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bc9b566bdfe48200fc8607680fbbe158

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

user32

comdlg32

rpcrt4

ws2_32

crypt32

msvcrt

Sections

.text Size: 66KB - Virtual size: 66KB

.rsrc Size: 41KB - Virtual size: 40KB

.data Size: 18KB - Virtual size: 224KB

.rdata Size: 4KB - Virtual size: 3KB

.text
Size: 66KB - Virtual size: 66KB

.rsrc
Size: 41KB - Virtual size: 40KB

.data
Size: 18KB - Virtual size: 224KB

.rdata
Size: 4KB - Virtual size: 3KB