87aa2160c2227cd5c61a9e587a2f050c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

87aa2160c2227cd5c61a9e587a2f050c_JaffaCakes118
Size

424KB
MD5

87aa2160c2227cd5c61a9e587a2f050c
SHA1

cc43a9d26863721f83bc1e1eba6a9fd8adb83973
SHA256

20e75a7265f146904abfe1330cb2a8d6f8ace73614f80c1e336e23ec0d0335c1
SHA512

371def5e6728d18b48a755994ee682d45e983a41666430c854a0cbe7b244abd7e47e1bf547b1868503b1745e10a11cd0ff8624c6800c0838c5e4ecf0fb218f84
SSDEEP

3072:t9tQOYg6tYjp+u+E+pMt0n0RLCGlRsJ04aPw//Ao3EPVESd0CkqNJeZqG3l7YVsb:MGlKJq4tUPjpkqXIZ3pYVsvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87aa2160c2227cd5c61a9e587a2f050c_JaffaCakes118

Files

87aa2160c2227cd5c61a9e587a2f050c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9834c3a6f4a62266a71dc1f4af87dde9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

PDB Paths

5334g42g\\ehre\\eh#HENr.pdb

Imports

user32

GetFocus
PeekMessageW
SetDlgItemTextW
IsIconic
MessageBoxW
ShowWindow
GetWindowLongW
SetForegroundWindow
SetWindowPlacement
DialogBoxParamW
CheckMenuItem
SetScrollPos
GetSubMenu
CloseClipboard
ChildWindowFromPoint
MoveWindow
LoadIconW
IsHungAppWindow
EndDeferWindowPos
GetDlgItemTextW
GetAncestor
GetSystemMetrics
TranslateAcceleratorW
UnhookWinEvent
GetMessageW
IsDialogMessageW
CallWindowProcA
EndDialog
ReleaseDC
GetKeyboardLayout
CharUpperW
GetDlgItem
SetFocus
SendMessageW
SetCursor
UpdateWindow
PostMessageW
GetWindowTextLengthW
SetActiveWindow
SetWindowLongW
WinHelpW
DispatchMessageW
DrawTextExW

netapi32

NetServerTransportAddEx

lz32

LZInit
LZSeek

gdi32

PatBlt

advapi32

QueryServiceStatusEx
SetThreadToken
RegFlushKey

winscard

SCardBeginTransaction

cfgmgr32

CM_Set_DevNode_Registry_PropertyW

kernel32

GetCPInfo
GetLogicalDrives
GetConsoleHistoryInfo
GetFileSizeEx
FormatMessageW
GetModuleHandleW

setupapi

SetupInitDefaultQueueCallback

msvfw32

DrawDibChangePalette

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt2
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata0
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9834c3a6f4a62266a71dc1f4af87dde9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

netapi32

lz32

gdi32

advapi32

winscard

cfgmgr32

kernel32

setupapi

msvfw32

Sections

.text Size: 114KB - Virtual size: 113KB

.crt2 Size: 5KB - Virtual size: 13KB

.data Size: 2KB - Virtual size: 1KB

.rdata0 Size: 300KB - Virtual size: 300KB

.rsrc Size: 1024B - Virtual size: 1000B

.text
Size: 114KB - Virtual size: 113KB

.crt2
Size: 5KB - Virtual size: 13KB

.data
Size: 2KB - Virtual size: 1KB

.rdata0
Size: 300KB - Virtual size: 300KB

.rsrc
Size: 1024B - Virtual size: 1000B