43fb68d8612e82aa8910938088e4cbb2_JaffaCakes118

General

Target

43fb68d8612e82aa8910938088e4cbb2_JaffaCakes118
Size

167KB
MD5

43fb68d8612e82aa8910938088e4cbb2
SHA1

fec439297d5e26e6ebdc758f6be4148e0f2c54ed
SHA256

11c20469082534b4e044cf3968af1bfaa37e5d8980b947d0ec1f793905514873
SHA512

3f477576eca9067174c8eca7623e81b2e067b1c449398c0c1b04c25a1f3c8129739674ab17a5831907b280a8bc4825cc23c348d70e195b499f15f0e3d5ea7206
SSDEEP

3072:eS2qEn2X3pZWEq+4iNFXdDB/dsPTFGXGsD8PkP8eV6MF6u69b:l2qEn2nGEqPkXz/dsLFGWsRP8kTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43fb68d8612e82aa8910938088e4cbb2_JaffaCakes118

Files

43fb68d8612e82aa8910938088e4cbb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98c5696f7d03b0728e688b63012eef5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetHandleInformation
LoadLibraryW
TransmitCommChar
LocalFree
EnumResourceNamesW
ExitProcess
GetVersionExA
ExitProcess
LocalAlloc
GetModuleFileNameA

comctl32

ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter

advapi32

RegDeleteKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW

gdi32

BitBlt
DeleteDC
SelectObject
CreateDCW
SetStretchBltMode
CreatePen
StretchBlt
LineTo
CreateDIBSection
GetObjectType
CreateCompatibleDC
CreateBitmap

winmm

timeGetTime

gdiplus

GdipGetImagePixelFormat
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipDisposeImage

msimg32

AlphaBlend
TransparentBlt

ole32

CoFreeUnusedLibraries
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance

user32

FindWindowA
DestroyMenu
RedrawWindow
TrackPopupMenuEx
CreatePopupMenu
ClipCursor
GetDesktopWindow

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsr
Size: 512B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98c5696f7d03b0728e688b63012eef5d

Headers

File Characteristics

Imports

kernel32

comctl32

advapi32

gdi32

winmm

gdiplus

msimg32

ole32

user32

Sections

.text Size: 127KB - Virtual size: 127KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 36KB - Virtual size: 36KB

.rsr Size: 512B - Virtual size: 60KB

.text
Size: 127KB - Virtual size: 127KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 36KB - Virtual size: 36KB

.rsr
Size: 512B - Virtual size: 60KB