3b979059ec96949fa384d382ae62665a_JaffaCakes118

General

Target

3b979059ec96949fa384d382ae62665a_JaffaCakes118
Size

49KB
MD5

3b979059ec96949fa384d382ae62665a
SHA1

655bc983eb5a65f0a79706c738feb10abd199904
SHA256

a1869a4b7eb2cf7f1203c170471d7f8e9eb50e75747eed50183d26e921351247
SHA512

063cab1e1f6184d313c66c886cd553fbe6049b64b440c330fa1c915a7fde4e9bcbdd85f170129f6f51d608ee3ccc107035c60bc98de3830c660c4005b648a398
SSDEEP

768:tume+2m68v1raxwuscsPvkkfasOd7Ks9BTk9ADQ+eykg2qCXQM3iJcmPM:tMm7WxVscs35fK7Ks9BTk+0+eH58PM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b979059ec96949fa384d382ae62665a_JaffaCakes118

Files

3b979059ec96949fa384d382ae62665a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3917bc9225dbae7569374a66c22a623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetTopWindow
MessageBoxA
DialogBoxParamA
ArrangeIconicWindows
CharUpperA
SetFocus
CharNextA
RegisterWindowMessageA
ShowWindow
LoadCursorA
EnableWindow
SetCursorPos
CharLowerA
KillTimer
SetTimer
ShowCursor
GetMessagePos
SetWindowTextA
GetMenuItemCount
GetDesktopWindow
ReleaseDC
GetParent

kernel32

GetConsoleCP
lstrlenA
GlobalDeleteAtom
lstrcatA
SetLastError
LoadLibraryA
GetLastError
GetProcAddress
FreeLibrary
GlobalAddAtomA
FreeConsole
Sleep
GetCommandLineA
GetConsoleOutputCP
FindResourceA
CopyFileA
OutputDebugStringA
GlobalFindAtomA

shell32

DragFinish
ShellAboutA

gdi32

GdiFlush
SetBkMode
CreateCompatibleDC
SetTextColor
GetObjectA
GdiGetBatchLimit
SelectObject
DeleteDC
SetBkColor
EndPage
CreateSolidBrush

ole32

CoFreeUnusedLibraries
CoFreeAllLibraries
CoGetCurrentProcess

comctl32

InitCommonControls
FlatSB_ShowScrollBar
MakeDragList
FlatSB_GetScrollPos
DrawInsert
FlatSB_GetScrollRange
FlatSB_GetScrollProp

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3917bc9225dbae7569374a66c22a623

Headers

File Characteristics

Imports

user32

kernel32

shell32

gdi32

ole32

comctl32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 920B

.rsrc Size: 42KB - Virtual size: 41KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 920B

.rsrc
Size: 42KB - Virtual size: 41KB