52b44f51d7332fd6209c0477f2299c64_JaffaCakes118

General

Target

52b44f51d7332fd6209c0477f2299c64_JaffaCakes118
Size

64KB
MD5

52b44f51d7332fd6209c0477f2299c64
SHA1

99d13fdd614cd3e701e387aa9e168ecba0b6c499
SHA256

d8b17ee84ce743c189da9f7b82928706938aa506f28d56b3e29e2de79e2bb66e
SHA512

e957b84a145b7ba9cf21908a30eeb1b295c56c039c6123cb50525a09a649320c139e0fb465f88cd0fd1787e8588cac911aa270e462547412f4f42283b758ed96
SSDEEP

1536:ITGXxi8bZsRp3sV82fTDjrWiNX5aCy3KU1ak2y2D:bh/uRS/ffjrWeU3KU1t2/D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52b44f51d7332fd6209c0477f2299c64_JaffaCakes118

Files

52b44f51d7332fd6209c0477f2299c64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e37e1dd081b56a39d9e5a25abcfc2170

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadTimes
GetOEMCP
TlsFree
ReleaseMutex
AddAtomA
GetConsoleCP
SetEvent
CreateMutexA
VirtualAlloc
TlsGetValue
GetThreadPriority
IsDBCSLeadByte
GetHandleContext
CompareStringA
GetUserDefaultLangID
CreatePipe
GetModuleHandleA
CancelWaitableTimer
GetLargestConsoleWindowSize
GetExitCodeThread
GetThreadLocale

user32

ReleaseDC
ShowWindow
GetForegroundWindow
GetClassInfoExA
ValidateRect
GetClassNameA
InvalidateRect
GetActiveWindow
ReleaseDC
GetWindowTextA
IsIconic
GetSystemMetrics
GetFocus
CloseWindow
IsWindowVisible
GetWindowTextLengthA
RegisterClassA
GetWindow
GetDC

dsound

DirectSoundEnumerateA
DllGetClassObject
DirectSoundCreate
GetDeviceID
DllCanUnloadNow

mscms

CheckColors

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 33B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e37e1dd081b56a39d9e5a25abcfc2170

Headers

File Characteristics

Imports

kernel32

user32

dsound

mscms

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 33B

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 33B

.rsrc
Size: 4KB - Virtual size: 4KB