079427efba6415b78b67703d434c0680_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

079427efba6415b78b67703d434c0680_JaffaCakes118
Size

62KB
MD5

079427efba6415b78b67703d434c0680
SHA1

2a086526b5ae3a066d79e8fbd18ccfd34dd5fd42
SHA256

c9d0d3d60671c3de5e55fab3f33f5c9b245e1c058bfda9deef691e6da7b9bcbe
SHA512

bbdedea4a9f08931601f251f5209620b1aafe4661b48d327376d2b73deddcb232d255c7257c288a017c6fb1be432243fdc753c9c6fb82cad6876e9dd78a40ecb
SSDEEP

1536:zASw9EK2W4v6rIzraVSVFCMuWnvpd8bNAajGp:wELWjrSrCM5v8Caj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
079427efba6415b78b67703d434c0680_JaffaCakes118

Files

079427efba6415b78b67703d434c0680_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae11c88948e81264db1145cf9ce3261a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingW
GetModuleHandleA
GetLastError
GetModuleFileNameA
ExitProcess
WritePrivateProfileSectionA
WriteProfileSectionA
VirtualAllocEx
LockFile
WriteProfileSectionW
LockFileEx
OutputDebugStringA
ReplaceFileW
GetSystemDefaultLCID
LoadLibraryA
VirtualFree
GetCurrentDirectoryA
WaitForMultipleObjects
VirtualAlloc
AreFileApisANSI
InterlockedCompareExchange

msvcrt

_wsystem
??_G__non_rtti_object@@UAEPAXI@Z
_beginthreadex
ispunct
_EH_prolog
_setmaxstdio
_ismbcsymbol
memcpy
atan
is_wctype
_ismbclegal

gdi32

GetDeviceCaps
CreateSolidBrush
GetCurrentObject
SetTextColor
GetTextExtentExPointW
GetStockObject
GetTextFaceW
SelectObject
GetBrushOrgEx
SetBkMode
GetTextExtentPoint32W
CreateRectRgn

user32

DialogBoxParamW
SetCursor
CreateWindowExW
AppendMenuW
GetMenu
GetSubMenu
GetParent
EnableMenuItem
TranslateMessage
RemoveMenu
GetMessageW
GetMonitorInfoW
GetWindowPlacement
MessageBeep
LoadIconA

winmm

mmDrvInstall
mciDriverNotify
timeSetEvent
mciGetCreatorTask
waveInReset
midiOutClose
mixerGetDevCapsW
midiInGetNumDevs
midiInStart

Exports

Exports

QnpdyNxk
Qcafp
XpEtcxFeowttcWq

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae11c88948e81264db1145cf9ce3261a

Headers

File Characteristics

Imports

kernel32

msvcrt

gdi32

user32

winmm

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 13KB - Virtual size: 12KB

.rsrc Size: 29KB - Virtual size: 28KB

.reloc Size: 512B - Virtual size: 56B

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 512B - Virtual size: 56B