fae49acf473371b348a6823252beb1e3_JaffaCakes118

General

Target

fae49acf473371b348a6823252beb1e3_JaffaCakes118
Size

78KB
MD5

fae49acf473371b348a6823252beb1e3
SHA1

92f78acf9c1443eec0bddd03f3d0ad37ef78f2d2
SHA256

485abb9889dd28162d7da64b424024e7cbd24053d60d7bf41b401ecf4fdc6033
SHA512

05a7b42fc6346d1449db228c4f074dedda11afeb68afa712720eded2cf8c8fc60693ca855c20089c4464d0f1a5cfb183b5d54e61bec40a08129d20dc5347d506
SSDEEP

1536:4UGYJByMVqRY5eUOQOC9B3j1h30qD2zOztlKspbaDYwLkRC:4leBHVqRHQjnxh30qDVztfmzIC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fae49acf473371b348a6823252beb1e3_JaffaCakes118

Files

fae49acf473371b348a6823252beb1e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

218b51fd279d10a264d394d492a4bd87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetTopWindow
IsWindowEnabled
GetMenu
TranslateMDISysAccel
SystemParametersInfoA
GetCursor
KillTimer
TrackPopupMenu
TranslateMessage

version

VerInstallFileA
GetFileVersionInfoSizeA

kernel32

GetDateFormatA
VirtualAlloc
GetCurrentThreadId
ExitProcess
GetCommandLineA
GetDiskFreeSpaceA
GetCurrentProcessId
LoadLibraryA

comctl32

ImageList_Create
ImageList_Add
ImageList_Destroy
ImageList_Read
ImageList_Write
ImageList_GetBkColor
ImageList_DrawEx

Exports

Exports

h21pHC472@24
tcP_VaTaB0_T@12
kP7em
mMDeqUmeCWyuc2
JctS8uR
zUlUg6Etf
K3agxx__Y2zlIj@16
FCb4XB@20
_ivhEnv487u6tOF
_WLmN40Sjz8wLB@12
CTR_d_Vb9
_XFD3tDOAL@20
MQVDe@12
F2TuclnQ0@8
_a_wI8T55_U88@24
_3R2ng
_jk3QVQ
_KGeGuiNeC@12
_xiJ4XA_lK
8t96thmJ6epi
XG51uu0oSW7Mn
_QZutguymil1@8
ox2wq0Ck4Jsu9
_rZL7B
Vo_6Zm4LY7qY@20

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

218b51fd279d10a264d394d492a4bd87

Headers

File Characteristics

Imports

user32

version

kernel32

comctl32

Exports

Exports

Sections

CODE Size: 14KB - Virtual size: 13KB

.data Size: 10KB - Virtual size: 9KB

.ihdata Size: 49KB - Virtual size: 49KB

.idata Size: 1024B - Virtual size: 882B

.thdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 14KB - Virtual size: 13KB

.data
Size: 10KB - Virtual size: 9KB

.ihdata
Size: 49KB - Virtual size: 49KB

.idata
Size: 1024B - Virtual size: 882B

.thdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB