ffebddc79b27c418b5ddb3b96aeda365_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ffebddc79b27c418b5ddb3b96aeda365_JaffaCakes118
Size

85KB
MD5

ffebddc79b27c418b5ddb3b96aeda365
SHA1

cd0083a74f5a8e98bf383fdff9639a7d1a8c5229
SHA256

29de27eec8b55bf154f689e3254e1dfde2d2bee94076dc30821e102bc0ee3f9b
SHA512

f4f93ac154261a13aae1abd2b65cd72f49bd9bd94948c77482dba31b4553d924f960d90e9de48485104d16256b49286161ae4a1dc9665eb868031cefe6ddc528
SSDEEP

1536:v6tLTUdt0z09m23CDj7+STN05xiSLRs4m8:StLYdt04m23M7+6GD3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffebddc79b27c418b5ddb3b96aeda365_JaffaCakes118

Files

ffebddc79b27c418b5ddb3b96aeda365_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03cec2c9f3bafaf0cca8ca02fb3fb186

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
SetScrollInfo
GetParent
WaitMessage
IsWindow
PostQuitMessage
IntersectRect
SetParent
OemToCharA
DestroyCursor
GetScrollRange
GetDC
DrawIconEx
GetWindowDC
FindWindowA
UpdateWindow
GetWindowThreadProcessId
IsCharUpperA
EnableMenuItem
RemovePropA
PeekMessageW
UnhookWindowsHookEx
IsMenu
RemoveMenu
MoveWindow
GetWindow
GetMenu
UnregisterClassA
GetPropA
CreateIcon
EnumWindows
GetScrollPos
GetLastActivePopup
IsWindowUnicode
GetMenuItemInfoA
GetCapture
SetActiveWindow
GetSysColor
DestroyWindow
GetKeyboardType
LoadBitmapA
IsDialogMessageA
IsDlgButtonChecked
SetClassLongA
MessageBoxA
SetScrollPos
SetPropA
GetSysColorBrush
RegisterWindowMessageA
GetScrollInfo
GetWindowTextLengthA
GetClientRect
CreateMenu
TranslateMessage
GetCursor
RegisterClipboardFormatA
CreatePopupMenu
SetWindowLongA
GetKeyboardLayout
GetWindowPlacement
wsprintfA

gdi32

GetTextAlign

version

VerInstallFileA
VerQueryValueA

kernel32

VirtualAllocEx
LockResource
FreeLibrary
LoadLibraryA
GetVersionExA
Sleep
CloseHandle
lstrlenW
GetCurrentProcessId
EnumCalendarInfoA
WaitForSingleObject
ExitProcess
CreateEventA
FormatMessageA
FindResourceA
FindFirstFileA
LocalReAlloc
SizeofResource
ReadFile
EnterCriticalSection
ResetEvent
HeapAlloc

Exports

Exports

yyB7Y@20
_hhrlznThK2QWRf@24
_QRu0ssuOjX
_lo9YKKVhR
_u77MBv@24
_9y_sDLT41u1@24
_yFfNE@4
_1TYBP6
_s78AW
3jxk6
zuzBM2RqUwNu@16

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03cec2c9f3bafaf0cca8ca02fb3fb186

Headers

File Characteristics

Imports

user32

gdi32

version

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 11KB - Virtual size: 42KB

.data Size: 50KB - Virtual size: 50KB

.edata Size: 1KB - Virtual size: 1KB

.badata Size: 1KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 11KB - Virtual size: 42KB

.data
Size: 50KB - Virtual size: 50KB

.edata
Size: 1KB - Virtual size: 1KB

.badata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 8KB