a24cc87fadfcdbda3488c8e07c44d4aa_JaffaCakes118

General

Target

a24cc87fadfcdbda3488c8e07c44d4aa_JaffaCakes118
Size

193KB
MD5

a24cc87fadfcdbda3488c8e07c44d4aa
SHA1

0c13ff0810879d56418b5c6401ee6cee13ea7da0
SHA256

d7ba9793304e4c8d42668c0ea3dd36ba121714b7d2920c6685aeb64128dc7499
SHA512

757e24e69c99a5121ea1eb3b40940c2b785fbe7fecac8ef0f5432b20f1ddeb83deebcd78777f26dd12c7a736337d93a6f3b677d04ef6980f8e585324da38fb43
SSDEEP

6144:Wcb4V4syDyiAEGiS5aL2to11CuWYQQAYYYYFF0:WcbU4JDZAErSYae7d0QAY+FF0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a24cc87fadfcdbda3488c8e07c44d4aa_JaffaCakes118

Files

a24cc87fadfcdbda3488c8e07c44d4aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd720042cac5aad7da4174c43f5ca491

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFiber
LocalAlloc
SetEndOfFile
GetSystemTime
VerLanguageNameW
GetUserDefaultLangID
TerminateProcess
CompareStringW
FileTimeToSystemTime
LockFile
FindResourceExA
GetFileTime
EnumResourceNamesA
GetFileType
FlushFileBuffers
SearchPathW
GetProfileStringW
GetVersionExW
FileTimeToLocalFileTime
FlushFileBuffers
GetFileAttributesA
GetVolumeInformationW
UnlockFile
IsDBCSLeadByte
GetSystemDirectoryW

comdlg32

GetFileTitleA

comctl32

ImageList_Create
ImageList_Add
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy

rpcrt4

RpcStringBindingComposeA
RpcBindingSetAuthInfoA
RpcBindingFromStringBindingA
NdrClientCall
RpcStringFreeA

user32

WinHelpW
GetSysColorBrush
DefWindowProcW
UnhookWindowsHookEx
DestroyIcon
RealGetWindowClass
CallNextHookEx
ToAscii
SetClipboardData
SetWindowPos
RegisterClassW
ChildWindowFromPoint
SetScrollRange
SetWindowsHookExW
ClipCursor
EmptyClipboard
IsClipboardFormatAvailable
DestroyCursor
DrawEdge
GetSysColor

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd720042cac5aad7da4174c43f5ca491

Headers

File Characteristics

Imports

kernel32

comdlg32

comctl32

rpcrt4

user32

Sections

.text Size: 176KB - Virtual size: 176KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 13KB - Virtual size: 13KB

.tls Size: 512B - Virtual size: 216KB

.text
Size: 176KB - Virtual size: 176KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 13KB - Virtual size: 13KB

.tls
Size: 512B - Virtual size: 216KB