9f204ac520b43d2fc0dbee96e0c9e287_JaffaCakes118

General

Target

9f204ac520b43d2fc0dbee96e0c9e287_JaffaCakes118
Size

182KB
MD5

9f204ac520b43d2fc0dbee96e0c9e287
SHA1

b86fd15f81860eee91943ec4f5eb65a2cb159ef2
SHA256

ee7e8d3c67a034dbe7196d4f01e7ef9006d87ce1dbb577cdd9d148516012487e
SHA512

472ae72c15a3418b26395e27b4a3e44c024578fc6f420242edca5486c78876f04561d87e399896dbcc11af67d67d8ae335381d15e70559299148c308b9761364
SSDEEP

3072:H2Nu+u6t71AZkPRS9HNv0j7d5bmiolHJybr7vbXr87sLL3dwr6h3FDnHj9l8V5J:H2VWcRckOPlHJYr4sLyrC1D5eVfY0JF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f204ac520b43d2fc0dbee96e0c9e287_JaffaCakes118

Files

9f204ac520b43d2fc0dbee96e0c9e287_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94c0f1072837483af5b03f0902433934

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

DestroyIcon
WinHelpW
IsClipboardFormatAvailable
SetWindowPos
DefWindowProcW
ToAscii
ClipCursor
CallNextHookEx
GetSysColorBrush
ChildWindowFromPoint
SetScrollRange
RegisterClassW
UnhookWindowsHookEx
SetWindowsHookExW
DrawEdge
DestroyCursor
EmptyClipboard
RealGetWindowClass
SetClipboardData
GetSysColor

comctl32

ImageList_Add
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Create
ImageList_Destroy

kernel32

GetVersionExW
LockFile
CreateFiber
GetFileTime
GetProfileStringW
GetFileType
TerminateProcess
FindResourceExA
CompareStringW
UnlockFile
FileTimeToSystemTime
EnumResourceNamesA
GetVolumeInformationW
GetFileAttributesA
SearchPathW
FlushFileBuffers
FlushFileBuffers
GetSystemTime
FileTimeToLocalFileTime
SetEndOfFile
GetUserDefaultLangID
IsDBCSLeadByte
LocalAlloc
VerLanguageNameW
GetSystemDirectoryW

comdlg32

GetFileTitleA

rpcrt4

RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoA
NdrClientCall
RpcStringFreeA

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94c0f1072837483af5b03f0902433934

Headers

File Characteristics

Imports

user32

comctl32

kernel32

comdlg32

rpcrt4

Sections

.text Size: 163KB - Virtual size: 162KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 15KB - Virtual size: 15KB

.tls Size: 512B - Virtual size: 76KB

.text
Size: 163KB - Virtual size: 162KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 15KB - Virtual size: 15KB

.tls
Size: 512B - Virtual size: 76KB