5749fd79374fe7b1fe0193acd652aa97_JaffaCakes118

General

Target

5749fd79374fe7b1fe0193acd652aa97_JaffaCakes118
Size

62KB
MD5

5749fd79374fe7b1fe0193acd652aa97
SHA1

d4d1494156263f1312b50fc655a4dc8f0ebe8afa
SHA256

01b800b808f6296edb5d56ac9fcaed74dd31f442de5a95c243fd671c252fb0f6
SHA512

7e2fc4e997cdac6709a89e79144850db98068d62e9a3131b95f55ddd5bdc80efb926a587b028dec7e24e51b49cb4347dafc12fc7619b159706bdd28d25d78335
SSDEEP

1536:D436uhIYMQ87pS7sbdtl6Bn+9c8A3CSMv4UHJkHkbG:D43bJUdv6B+G8oCSLmqN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5749fd79374fe7b1fe0193acd652aa97_JaffaCakes118

Files

5749fd79374fe7b1fe0193acd652aa97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

617e55b1f4c4e050f2b44dfed269a9d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetForegroundWindow
OpenDesktopA
EndDialog
CharLowerBuffA
GetCursorPos
GetWindowLongA
CloseWindowStation
CloseDesktop
DrawIcon
GetKeyState
FindWindowExA
GetWindowThreadProcessId
DispatchMessageA
PeekMessageA
GetIconInfo
LoadCursorA
GetDlgItemTextA
GetClassNameA
SendMessageA
GetDlgItem

shlwapi

wnsprintfA
StrStrW
PathFindFileNameW
PathFileExistsW
wvnsprintfA
SHDeleteKeyA
wnsprintfW
wvnsprintfW
StrCmpNIW
PathCombineW
PathRemoveFileSpecW

kernel32

GetLastError
EnterCriticalSection
HeapAlloc
CopyFileW
WideCharToMultiByte
VirtualProtect
LeaveCriticalSection
FindFirstFileW
GetModuleHandleA
UnmapViewOfFile
CreateFileA
VirtualAlloc
SetFilePointer
SetEvent
CreateMutexW
LoadLibraryA
ReleaseMutex
MultiByteToWideChar
ResetEvent
CloseHandle
lstrcpyA
Sleep

advapi32

DuplicateTokenEx
GetUserNameW
RegDeleteValueA
RegCloseKey
RegSetValueExA
CryptAcquireContextW
RegQueryValueExA
RegCreateKeyExA
CryptReleaseContext
RegEnumKeyExA
CryptGetHashParam

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

617e55b1f4c4e050f2b44dfed269a9d2

Headers

DLL Characteristics

File Characteristics

Imports

user32

shlwapi

kernel32

advapi32

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 20KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 20KB