ee005dd328f30548b6ee2225689cd241_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ee005dd328f30548b6ee2225689cd241_JaffaCakes118
Size

11.9MB
MD5

ee005dd328f30548b6ee2225689cd241
SHA1

45b4e62323544699b1f9f182ef3b73b05e2cc4c6
SHA256

90e021b34e295ae9488b18ff093a9b7ef86560758702b90cf293ee03b5b23d46
SHA512

5e654dddeaff066064dc5b16d328a589522a5f7777e63bdc417ce0f1825bde7d2501d2c79a90e1e731c79c059f5f2aa1d3db8c0829185972cec6555942add345
SSDEEP

196608:3YhpbyHMRU6pt7FWl1WoJKWISulOHC61mpjXqX1Ss+cHUfIiYbuSuzcsCyxdAkYV:3chyHMRU6ptMHWoJKHSulOHCzLts+UUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/American Medical Encyclopedia v1.0/MedEncyclopedia.exe
unpack001/American Medical Encyclopedia v1.0/crack/MedEncyclopedia.exe

Files

ee005dd328f30548b6ee2225689cd241_JaffaCakes118
.rar
American Medical Encyclopedia v1.0/MedEncyclopedia.exe
.exe windows:4 windows x86 arch:x86

a3cd138f09c17f81fb64526d63cb2df6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
ExitProcess
DeleteFileA
FreeLibrary
lstrcpyA
GetProcAddress
LoadLibraryA
VirtualFree
CloseHandle
WriteFile
GetWindowsDirectoryA
CreateFileA
lstrcatA
CompareStringA
GetCurrentDirectoryA
lstrlenA
ReadFile
SetFilePointer
VirtualAlloc
GetModuleFileNameA
InterlockedIncrement
GetModuleHandleA

user32

SetCursor
LoadCursorA
wsprintfA
ShowWindow
FindWindowA
MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Shared
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
American Medical Encyclopedia v1.0/_Readme.html
.html
American Medical Encyclopedia v1.0/crack/MedEncyclopedia.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cas
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a3cd138f09c17f81fb64526d63cb2df6

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 4B

.data Size: 512B - Virtual size: 604B

.idata Size: 1024B - Virtual size: 766B

.Shared Size: 512B - Virtual size: 4B

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 434B

Headers

File Characteristics

Sections

CODE Size: 2.0MB - Virtual size: 2.0MB

DATA Size: 25KB - Virtual size: 28KB

BSS Size: - Virtual size: 8KB

.idata Size: 13KB - Virtual size: 16KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 124KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.cas Size: 3KB - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 4B

.data
Size: 512B - Virtual size: 604B

.idata
Size: 1024B - Virtual size: 766B

.Shared
Size: 512B - Virtual size: 4B

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 434B

CODE
Size: 2.0MB - Virtual size: 2.0MB

DATA
Size: 25KB - Virtual size: 28KB

BSS
Size: - Virtual size: 8KB

.idata
Size: 13KB - Virtual size: 16KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 124KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.cas
Size: 3KB - Virtual size: 4KB