3fcad85bd2727840934b23120799c2c5_JaffaCakes118

General

Target

3fcad85bd2727840934b23120799c2c5_JaffaCakes118
Size

40KB
MD5

3fcad85bd2727840934b23120799c2c5
SHA1

584e464f6f1dcd1a840e85ef728f76dc371f64c4
SHA256

0e28748d78847d93385ed4a9c743f696f44a1391afb109fe3b6fa5d795df6752
SHA512

e9bdc7e0444b403eee131c023ea189c859b60da098282828eacbd77103d4502202cfd0a54e8bef72b09ed5922eb22d0e328210b59c8a4dc4fab516e1821beaf7
SSDEEP

768:z3j/a7Be4cN/JZamsSGa8/PLkl4s+B7Zwa:jOVHe/DhpSzkgx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fcad85bd2727840934b23120799c2c5_JaffaCakes118

Files

3fcad85bd2727840934b23120799c2c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47a486f09860fe1ba03083906fac8e40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetImageInfo
ImageList_DrawEx
ImageList_LoadImageW
ImageList_AddMasked
ImageList_Destroy
ImageList_EndDrag
ImageList_GetIcon
ImageList_AddIcon
InitCommonControls
ImageList_ReplaceIcon
ImageList_Merge
ImageList_Create
ImageList_Read
ImageList_DragMove
ImageList_GetIconSize
ImageList_LoadImageA
ImageList_DragShowNolock
ImageList_GetImageRect
ImageList_Replace

user32

BlockInput
CopyImage
LoadMenuA
GetFocus
CopyRect
GetMenu
LoadCursorA
CreateIcon
EndDialog
GetWindowTextA
DrawIconEx
IsWindow
DialogBoxParamW
AppendMenuA
CloseWindow
DrawTextA
DrawIcon
GetDlgItem
GetWindowTextLengthA

advapi32

RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyW
RegOpenKeyW
RegDeleteKeyA
RegQueryValueExA
RegEnumValueA
RegEnumKeyExW
RegLoadKeyW
RegGetKeySecurity
RegCreateKeyExA
RegDeleteValueW
RegQueryValueW
RegQueryValueA
RegQueryInfoKeyW
RegReplaceKeyA

kernel32

lstrlenA
WideCharToMultiByte
SetLastError
GetLastError
GetStdHandle
HeapFree
lstrcpyA
GetFileType
DeleteFileA
GlobalFree
FreeLibrary
GetFileSize
lstrcmpA
CloseHandle
GetCPInfo
GetModuleHandleA
GetStringTypeA
GetStringTypeW
GetCommandLineA
Sleep

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsr�
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47a486f09860fe1ba03083906fac8e40

Headers

File Characteristics

Imports

comctl32

user32

advapi32

kernel32

Sections

.text Size: 4KB - Virtual size: 2KB

.data Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 64KB

.rsr� Size: 4KB - Virtual size: 2KB

.text
Size: 4KB - Virtual size: 2KB

.data
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 64KB

.rsr�
Size: 4KB - Virtual size: 2KB