JaffaCakes118_93ec42e403724b5cd6f2d4ef5b3d6cd0

General

Target

JaffaCakes118_93ec42e403724b5cd6f2d4ef5b3d6cd0
Size

122KB
MD5

93ec42e403724b5cd6f2d4ef5b3d6cd0
SHA1

e86564fd159d25c641e1e79a0d950b018087320b
SHA256

46c9f3f567ede710c7e4a537b37d34324cca13fb686194a675cbe87d116de2ae
SHA512

6dc1fdeb85475df7eb0c4b15c2bd2797996582c7b28862f18bbf6002a5d50c4a1227ea8a04307bfcdd5a797c1727a631e3f2e07b88bd949ecd06798297281055
SSDEEP

3072:hppLk1HvkcbsjfTD923qhXMyAeovvQfA+xOOh:hppLk1sN2TxvT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_93ec42e403724b5cd6f2d4ef5b3d6cd0

Files

JaffaCakes118_93ec42e403724b5cd6f2d4ef5b3d6cd0
.exe windows:5 windows x86 arch:x86

a4c7d69384b21c034012b4a08be7d8f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetSystemInfo
VirtualAlloc

user32

CharUpperA
CheckDlgButton
CheckRadioButton
CloseWindow
CreateAcceleratorTableW
CreateDialogParamW
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DestroyAcceleratorTable
DrawEdge
GetAsyncKeyState
GetClassInfoExA
GetClassNameW
GetDlgCtrlID
GetDlgItemInt
GetLastActivePopup
GetScrollInfo
GetWindowLongA
GetWindowTextW
CharNextW
IsDialogMessageW
IsDlgButtonChecked
LoadBitmapW
LoadIconW
LoadMenuW
LoadStringA
MessageBeep
MessageBoxW
ModifyMenuW
RegisterClassExA
ScreenToClient
SetCapture
SetCursorPos
SetDlgItemInt
SetDlgItemTextW
SetRectEmpty
SetWindowLongA
SetWindowPos
SetWindowTextW
LoadCursorA
LoadIconA
ShowWindow
BeginDeferWindowPos
InvalidateRgn

advapi32

RegOpenKeyA

msvcrt

_XcptFilter
__getmainargs
__lconv_init
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_mbsinc
_mbslen
_mbsrchr
_stricmp
_strnicmp
exit
setlocale
strchr
strncpy
strtoul

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4c7d69384b21c034012b4a08be7d8f1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 168B

.data0 Size: 96KB - Virtual size: 96KB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 168B

.data0
Size: 96KB - Virtual size: 96KB

.rsrc
Size: 19KB - Virtual size: 18KB