5447d5bc8eaf343f62eeb511b3a89c95_JaffaCakes118

General

Target

5447d5bc8eaf343f62eeb511b3a89c95_JaffaCakes118
Size

932KB
MD5

5447d5bc8eaf343f62eeb511b3a89c95
SHA1

6fcbcd133abe31a8898c20286cdbc6992a6695fc
SHA256

e20f2d51eafda197afd6512fae1d7aeccafdf22b9b20ab02df6748fcc9be2478
SHA512

45069ce59b3c01aae908ecea704a7b82df26792de15a75557130fdfc69eeaf5842aa4bce70b762524f2c57a4b471ad4f6a24a5db8db7033b382ff4dbc6608d66
SSDEEP

24576:KGw7IjthC8r06ZkuBakMxfBqaCdMRkwtqpR5Hwhu:KGjB02zMh8vw05Qhu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5447d5bc8eaf343f62eeb511b3a89c95_JaffaCakes118

Files

5447d5bc8eaf343f62eeb511b3a89c95_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e830e9e153cef1fc22570b84dc1be4b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetVolumeInformationW
ReadFile
lstrlenW
GetEnvironmentVariableA
GlobalAlloc
GetLogicalDrives
GetModuleHandleA
ExitProcess
SetFilePointer
lstrcpynW
LoadLibraryExA
GetDriveTypeW
GetPrivateProfileIntA
lstrcpynA
GetModuleFileNameA
GetTickCount
GetPrivateProfileStringA
lstrlenA
FreeLibrary
CreateFileA
SetErrorMode

user32

DestroyMenu
CharNextA
TrackPopupMenu
CharNextW
RegisterClassA
RegisterWindowMessageA
InsertMenuItemW
DefWindowProcA
GetCursorPos
GetAsyncKeyState
LoadImageA
InsertMenuItemA
CreateWindowExA
CreatePopupMenu
SetForegroundWindow
PostQuitMessage
GetMessageA
FindWindowA
DestroyIcon
MessageBoxA
EnableMenuItem
DestroyWindow
GetWindowTextW
SendMessageA
LoadStringW
SetMenuDefaultItem
DispatchMessageA

msvfw32

DrawDibProfileDisplay
ICRemove

advapi32

RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegCloseKey

shlwapi

StrToIntA
PathFileExistsA

shell32

ShellExecuteA
Shell_NotifyIconW
SHGetSpecialFolderPathA

Sections

.text
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 405KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e830e9e153cef1fc22570b84dc1be4b3

Headers

File Characteristics

Imports

kernel32

user32

msvfw32

advapi32

shlwapi

shell32

Sections

.text Size: 516KB - Virtual size: 516KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 405KB - Virtual size: 3.7MB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 516KB - Virtual size: 516KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 405KB - Virtual size: 3.7MB

.rsrc
Size: 7KB - Virtual size: 7KB