f8601ed0f1f8e1247f099217de04ce5c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f8601ed0f1f8e1247f099217de04ce5c_JaffaCakes118
Size

36KB
MD5

f8601ed0f1f8e1247f099217de04ce5c
SHA1

765e5443d52c5976ba9c77661bf3255f2e7cc6e0
SHA256

f0577ca18e23e2a75f19d4c3a48291277f152514b3bb061f14923f25b4c89a50
SHA512

91026bae63bed6872d6a5fde58a9744e5cb1bd86960abf9afe58b5b991e9abc6631dd4a131e8539b8634c4c4ca7abf335225397e9d679a514baf38abbf46688c
SSDEEP

384:nDlOqXWe/jwOyYvNx6ubfF8NXz2S2THmlyX7pyyobezM6AlaHd1EI6o1bw93rfms:njz/vJCNXzO7py5DzYHdZ6oyrfms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8601ed0f1f8e1247f099217de04ce5c_JaffaCakes118

Files

f8601ed0f1f8e1247f099217de04ce5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11a3b39f54b29915a5bcf179b23e2d2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
GetWindowsDirectoryA
GlobalFree
FindClose
WinExec
GetPrivateProfileIntA
GlobalAlloc
GetFileSize
OpenFile
ReadFile
CloseHandle
GetPrivateProfileStringA
FreeEnvironmentStringsW
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetLastError
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GetDriveTypeA
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA

user32

UpdateWindow
ReleaseCapture
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
LoadIconA
LoadCursorA
LoadImageA
RegisterClassExA
GetWindowLongA
SetWindowTextA
MessageBoxA
MoveWindow
BeginPaint
EndPaint
GetCapture
LoadStringA
InvalidateRect
GetWindowRect
PostQuitMessage
DialogBoxParamA
GetForegroundWindow
PostMessageA
GetActiveWindow
GetDC
ReleaseDC
EndDialog
wsprintfA
FindWindowA
SystemParametersInfoA
GetSystemMetrics
SetWindowPos
SetForegroundWindow
IsIconic
ShowWindow
GetDesktopWindow

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

msvfw32

DrawDibDraw
DrawDibClose
DrawDibRealize
DrawDibOpen

winmm

PlaySoundA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

11a3b39f54b29915a5bcf179b23e2d2b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvfw32

winmm

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 21KB

.rsrc Size: 4KB - Virtual size: 3KB

.trdata Size: 68KB - Virtual size: 68KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 21KB

.rsrc
Size: 4KB - Virtual size: 3KB

.trdata
Size: 68KB - Virtual size: 68KB