4688af9486947135b7a7ec19dc805d77_JaffaCakes118

General

Target

4688af9486947135b7a7ec19dc805d77_JaffaCakes118
Size

144KB
MD5

4688af9486947135b7a7ec19dc805d77
SHA1

272570261315fbcf3871cd0006a48ffd860b5696
SHA256

09ad5e0a127a54914abef8f7a027aca2da4a4dcf57bae41de0f914b07f8d22ff
SHA512

cfde867a45270b1c7fbaa09e5ae9eb89b6f0a5c8a9b2bac3d022ff41e0f48fefa3cfbca5fa02f6dd5c679b7bca418a2279607dc0a1772109860a548a921b8efa
SSDEEP

3072:SJ+y8Wc7KEeBlzDF47S9zkkkSW9+kyskh6RVdz+iuSZDl9xA+8hZBZj5vUv:SJNTc7KVHHFphkI4Vd61SxlUdvUv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4688af9486947135b7a7ec19dc805d77_JaffaCakes118

Files

4688af9486947135b7a7ec19dc805d77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

07a9a0b7306a69de7edfc78bf88e93ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetModuleHandleW
VirtualAlloc
FindAtomA
FreeLibrary
GetModuleHandleW
GetProfileStringA
QueryPerformanceCounter
GetProfileIntA
LoadLibraryA
ExitThread
DebugBreak
GetCurrentProcessId
CreateWaitableTimerA
SetEnvironmentVariableA
GetEnvironmentVariableW
GetOEMCP
GetUserDefaultUILanguage
GetStartupInfoA
GetComputerNameExA
TerminateThread
lstrlenA
CancelWaitableTimer
lstrlen
GetACP

user32

LoadIconA
SetCursor
SendMessageA
SendDlgItemMessageA
TranslateMessage
DialogBoxParamA
GetWindowLongW
KillTimer
wsprintfW
GetDlgItemTextW
CharPrevW
SetDlgItemTextA
SetTimer
GetSystemMetrics
SetDlgItemInt
IsWindow
InvalidateRect
SetWindowTextW
GetDlgItemTextA
SetWindowLongA
DefWindowProcW
PeekMessageA
SetWindowTextA
PostMessageW
CharPrevExA
SetDlgItemTextW
ReleaseDC
LoadCursorW
GetFocus
DestroyWindow
BeginPaint
PeekMessageW
GetFocus
GetDC
MessageBoxA
GetWindowLongA
PostMessageA
GetSysColorBrush

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 355B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07a9a0b7306a69de7edfc78bf88e93ba

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 87KB - Virtual size: 87KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 355B

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 87KB - Virtual size: 87KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 355B