aaafbf67bccd7fe6b96ca34e57e5a54f_JaffaCakes118

General

Target

aaafbf67bccd7fe6b96ca34e57e5a54f_JaffaCakes118
Size

67KB
MD5

aaafbf67bccd7fe6b96ca34e57e5a54f
SHA1

a65d544f833bcfe81f37fb2e073226b1e101f31e
SHA256

852646c79d4dd14a650b11f02bc27b99acd1bd375caaddafcf71d35dab933019
SHA512

b0da6ec6682e6efe602b1f14d1c656e5d26cf6bae78b89224c11ab89a496828bf6585e7c0a49c92cd2a0c4f3136b359621f9a59a0ac40f0b8922c06e8f1439b7
SSDEEP

768:0kxO0lD6TYcwJ7ZN9WtEUD8iutvwwDVcoR2OkrQP3QNxmzkwvmeD10Jemh/AqssD:010Z97j9Wm9cfrAhzt6IW4qDvpRZY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaafbf67bccd7fe6b96ca34e57e5a54f_JaffaCakes118

Files

aaafbf67bccd7fe6b96ca34e57e5a54f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3e43cc251e1c415abda861e49ad3ffb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
GetQueuedCompletionStatus
CloseHandle
GetTickCount
LoadLibraryA
PostQueuedCompletionStatus
CreateEventA
RtlUnwind
SetEvent
CreateIoCompletionPort
WaitForMultipleObjects
CreateThread

crtdll

__GetMainArgs
exit
raise
signal

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

imm32

ImmGetCompositionStringW
ImmGetContext
ImmNotifyIME

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_controlfp
_initterm
exit
_cexit
_XcptFilter
_exit
_c_exit
__setusermatherr

gdi32

DeleteDC
GetStockObject

user32

LoadIconW
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
MessageBoxW
GetSystemMetrics
DefWindowProcW
LoadCursorW
PostMessageW
GetParent
SetWindowTextW
EnableWindow
TranslateMessage
UpdateWindow
DispatchMessageW
ActivateKeyboardLayout

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3e43cc251e1c415abda861e49ad3ffb2

Headers

File Characteristics

Imports

kernel32

crtdll

advapi32

imm32

msvcrt

gdi32

user32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 57KB - Virtual size: 116KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 364B - Virtual size: 364B

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 57KB - Virtual size: 116KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 364B - Virtual size: 364B