2584b41b6800e6ff21ae5209b36b81a0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2584b41b6800e6ff21ae5209b36b81a0_JaffaCakes118
Size

997KB
MD5

2584b41b6800e6ff21ae5209b36b81a0
SHA1

82efbad0b9eb3c47b6f6ba15616fd4f8ff76b662
SHA256

1a3129ce04ccde393eb176064a37900b031f0f63f13c34058b7048a15deb94f9
SHA512

72272061078baf9e0752e6f341d8d383e0c01756c80625b0e5f1927db3fb6c25bd740d4232fa3ee3197de9dd47fac7670c8d95eb71af17dd86a7bedc0c6fb6fb
SSDEEP

24576:LEgwhin97d96zsrBQtttkxMXU6ZoaDdcGBUYlclIDDNM/0A:DcwrCCOBDdlWYalRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2584b41b6800e6ff21ae5209b36b81a0_JaffaCakes118

Files

2584b41b6800e6ff21ae5209b36b81a0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f51a70ae1b5310d46d7a73d476f4c04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

kernel32

GetProcAddress
VirtualAlloc
HeapAlloc
HeapFree
HeapSize
GetCurrentProcess
ExitProcess
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetCurrentThreadId
GetLastError
FindClose
GetSystemTimeAsFileTime
GetSystemInfo
FormatMessageW
lstrcmpiW
GetModuleFileNameW
GetStartupInfoW
FindFirstFileW
IsValidCodePage
GetUserDefaultLCID
GetModuleHandleW

uxtheme

CloseThemeData
IsAppThemed
GetThemeColor
DrawThemeParentBackground

wintrust

CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CryptCATAdminAcquireContext
WinVerifyTrust

msvcrt

__p__fmode
__set_app_type
_except_handler3
__setusermatherr
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__p__commode
_adjust_fdiv
_controlfp

mpr

WNetGetConnectionW

ole32

CLSIDFromProgID
CLSIDFromString

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.02e4
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.h5rv0
Size: 753KB - Virtual size: 753KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f51a70ae1b5310d46d7a73d476f4c04

Headers

File Characteristics

Imports

comdlg32

kernel32

uxtheme

wintrust

msvcrt

mpr

ole32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 6.9MB

.02e4 Size: 100KB - Virtual size: 100KB

.h5rv0 Size: 753KB - Virtual size: 753KB

.rsrc Size: 114KB - Virtual size: 113KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 6.9MB

.02e4
Size: 100KB - Virtual size: 100KB

.h5rv0
Size: 753KB - Virtual size: 753KB

.rsrc
Size: 114KB - Virtual size: 113KB