fb8387ea928b6fe38c43ddf01f672ac7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fb8387ea928b6fe38c43ddf01f672ac7_JaffaCakes118
Size

196KB
MD5

fb8387ea928b6fe38c43ddf01f672ac7
SHA1

af4bdac6fb60d2d0cc0ce13fa781b9c11d4628ca
SHA256

7d202eeac4e080d9fdcb51cc89e9e8683fde3296c9d5b91aa58ea753ff1dda27
SHA512

7ea45e793485b1e3eae9743b46c8121241f5dde881a161d5a37974285b4e6f418ad7ed6a4e927b855d8983f7df1c60d774095ff421f7b2bb032245862c7faf18
SSDEEP

3072:QAvp/kF5DzcFYgqrGUX69qQvovAZEdGsiSU/VF7nWuMEaY5HzHJ1S9DYzLiaiE:XR/kjzc7flvoviEdG1FKupj5XgD39E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8387ea928b6fe38c43ddf01f672ac7_JaffaCakes118

Files

fb8387ea928b6fe38c43ddf01f672ac7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aceb59d6ea0573309ee85de96416f9cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Life\Ball\Box\Flower.exe

Imports

kernel32

GetFileSize
EnumResourceTypesA
ClearCommBreak
GlobalAlloc
UnlockFile
ReadFile
HeapCreate
SearchPathA

user32

RegisterClassA
GetKeyboardType
PostMessageW
TranslateMessage
DlgDirSelectComboBoxExA
GetDlgItemInt
GetKeyboardLayoutList
WindowFromPoint
SetCursor
MonitorFromPoint
GetMenuItemRect
CharNextW
SetScrollInfo
CreateWindowExA
GetSystemMetrics
LookupIconIdFromDirectory
AttachThreadInput
GetKeyState
IsCharAlphaA
SendNotifyMessageW
ArrangeIconicWindows
GetActiveWindow
GrayStringW
IsCharAlphaW

gdi32

SetWindowExtEx
CreateFontIndirectA
GetTextExtentExPointW
TextOutW
CreateRectRgnIndirect
CreateFontIndirectW
DPtoLP
SaveDC
SetDIBits
GetStockObject

atl

AtlAxCreateControl
AtlAxCreateControlEx

shlwapi

PathFileExistsW

Exports

Exports

_FfgdjhjfghghjlkfUJfkjfdjkgjkfjkgfJfkd@0
_GetClassInfoAGetClassInfoAGetClassInfoAGetClassInfoA@0

Sections

.dedrde
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vggh
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wqew
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ereffv
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdgdfs
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aceb59d6ea0573309ee85de96416f9cb

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

atl

shlwapi

Exports

Exports

Sections

.dedrde Size: 1KB - Virtual size: 1KB

.text Size: 137KB - Virtual size: 136KB

.vggh Size: 512B - Virtual size: 64B

.wqew Size: 512B - Virtual size: 171B

.ereffv Size: 512B - Virtual size: 64B

.fdgdfs Size: 512B - Virtual size: 64B

.data Size: 26KB - Virtual size: 25KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 2KB - Virtual size: 1KB

.dedrde
Size: 1KB - Virtual size: 1KB

.text
Size: 137KB - Virtual size: 136KB

.vggh
Size: 512B - Virtual size: 64B

.wqew
Size: 512B - Virtual size: 171B

.ereffv
Size: 512B - Virtual size: 64B

.fdgdfs
Size: 512B - Virtual size: 64B

.data
Size: 26KB - Virtual size: 25KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 2KB - Virtual size: 1KB