5209634b505af4f99285fb2b54f4a687_JaffaCakes118

General

Target

5209634b505af4f99285fb2b54f4a687_JaffaCakes118
Size

828KB
MD5

5209634b505af4f99285fb2b54f4a687
SHA1

30ef96eb399449e32255e1320968b64d1cddc5eb
SHA256

e6ef58891fb9719293c135073593d4dacac8075641667fbadbdb51fe07c15be9
SHA512

589ba0c774fb049b9342d310b894f46c277a7596297f17df9847eb03312a1591fd77b8c8dde6d8ca7f9e89fc1cc5eff0c589edef1467e989b37726f5d1870bd2
SSDEEP

12288:T96knQnARmJaKENZFgZ0JQ8TMWJAKyamh1:T96bnAReaKENr4beHmBr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5209634b505af4f99285fb2b54f4a687_JaffaCakes118

Files

5209634b505af4f99285fb2b54f4a687_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d3c6383eddc1b7ec659af5431c08abe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameW
GetSaveFileNameW

kernel32

GlobalFindAtomA
QueryDosDeviceA
GetShortPathNameW
ExitProcess
GetSystemTime
CompareStringW
GetFileAttributesA
GetProfileIntA
IsBadReadPtr
GetDriveTypeA
MultiByteToWideChar
EnumCalendarInfoW
WaitNamedPipeA
GetLocaleInfoW
ReadFile
QueryDosDeviceW
TlsGetValue
ReadConsoleInputW
EnumResourceNamesA
LoadLibraryExA
SetErrorMode
lstrcmpiW
FindFirstFileA
GetDriveTypeW
DebugBreak
GetUserDefaultLCID
GetProcessHeap
GetTempFileNameA
SetProcessAffinityMask
GetVolumeInformationW
GetBinaryTypeA
FindNextChangeNotification
SetThreadPriorityBoost
GetSystemTimeAsFileTime
SetTimeZoneInformation
_lread
FormatMessageA
CopyFileExW
GetLongPathNameA
GlobalFree
SetLastError
WriteProcessMemory
ReadFileScatter
SearchPathW
WriteFile
GlobalGetAtomNameW
lstrcpynA
GetOEMCP
lstrcmpiA
SetNamedPipeHandleState
Beep
GetFileType
OutputDebugStringW
lstrcpyA
WritePrivateProfileSectionA

user32

SetActiveWindow
CloseDesktop
DrawStateW
GetTabbedTextExtentW
LoadAcceleratorsA
FindWindowExW
GetFocus
GetForegroundWindow
CharLowerW
ActivateKeyboardLayout
GetLastActivePopup
DrawAnimatedRects
ExitWindowsEx
CopyImage
ReleaseCapture
CloseWindow
mouse_event

Sections

.text
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d3c6383eddc1b7ec659af5431c08abe

Headers

File Characteristics

Imports

comdlg32

kernel32

user32

Sections

.text Size: 358KB - Virtual size: 358KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 404KB - Virtual size: 404KB

.rsrc Size: 60KB - Virtual size: 60KB

.text
Size: 358KB - Virtual size: 358KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 404KB - Virtual size: 404KB

.rsrc
Size: 60KB - Virtual size: 60KB