e965a9f43dfcfcccc3233ab97131ea6d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e965a9f43dfcfcccc3233ab97131ea6d_JaffaCakes118
Size

96KB
MD5

e965a9f43dfcfcccc3233ab97131ea6d
SHA1

7dabc293e04e5bfe49f61a4b52b7d1ee0afbb96a
SHA256

2a7f15a1efa94e90de277575d4d77c2cd5afbaa109499836bbf9e96515fbe59c
SHA512

241faaa57e14dba8e2a1c2a90d00aa37dbd2dc1ac7b6a293a1fd728944d10d5800f09b3ea432e9b3e0bd328b824e77ac765c8f1628275cf4a7f350edac1c199a
SSDEEP

1536:pMWriupHfiKukpylMt/lZz2gfyIbeOKa67JY0aTGgRkhi9NBp4my:FrFpHfiVkpy0/lZzpzwvwNBeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e965a9f43dfcfcccc3233ab97131ea6d_JaffaCakes118

Files

e965a9f43dfcfcccc3233ab97131ea6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6507b256d9b05eeb54e05d50b8fbeda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetTextColor
GetPaletteEntries

ole32

CoReleaseMarshalData
MkParseDisplayName
StgOpenStorage
OleRegGetUserType
CoGetMalloc

kernel32

GetModuleHandleA
lstrlenW
EnterCriticalSection
GetCurrentProcessId
LoadLibraryA
GetCurrentProcess
LocalReAlloc
ExitProcess
GetTempPathA
IsBadHugeReadPtr
VirtualAlloc
GetTickCount
SetHandleCount
GetThreadLocale
SetErrorMode
GetStringTypeA
HeapAlloc
GetACP
GetSystemDefaultLangID
LockResource
FreeLibrary
GetVersionExA
lstrcmpiA
SetThreadLocale

user32

IsWindowVisible
CharUpperA
wsprintfA
DrawAnimatedRects
IsZoomed
GetCapture
ActivateKeyboardLayout
DrawTextA
MessageBoxA
RegisterClipboardFormatA
SetParent
GetMenu
GetMenuItemID
GetClientRect
GetKeyboardLayout
GetLastActivePopup
GetClipboardData
GetWindowTextA
GetMenuItemCount
GetKeyboardLayoutList
OemToCharA
IsWindowUnicode
SetPropA
DrawMenuBar
GetForegroundWindow
OpenClipboard
CreateMenu
SetWindowsHookExA
InflateRect
LoadBitmapA
ClientToScreen
SystemParametersInfoA
LoadCursorA
IsRectEmpty
EndDialog
LoadStringA
TrackPopupMenu
EmptyClipboard
IsMenu
SetWindowTextA
RedrawWindow
UnhookWindowsHookEx
GetScrollPos
GetClassLongA
DeleteMenu
GetWindowThreadProcessId
IntersectRect
ScrollWindow
GetClassNameA
SendMessageW
ReleaseCapture
InsertMenuA
CharLowerBuffA
DestroyIcon
DestroyMenu
GetFocus
GetDlgItem
SetWindowPos
EndPaint
GetIconInfo
EnumThreadWindows
CreatePopupMenu

Exports

Exports

qVLc7dvo3Ta7@8

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6507b256d9b05eeb54e05d50b8fbeda

Headers

File Characteristics

Imports

gdi32

ole32

kernel32

user32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 50KB - Virtual size: 49KB

.edata Size: 2KB - Virtual size: 2KB

.badata Size: 512B - Virtual size: 80B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 50KB - Virtual size: 49KB

.edata
Size: 2KB - Virtual size: 2KB

.badata
Size: 512B - Virtual size: 80B

.rsrc
Size: 8KB - Virtual size: 8KB