0be510a0d9fb6ddd09159e0a4e9ee7ab_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0be510a0d9fb6ddd09159e0a4e9ee7ab_JaffaCakes118
Size

141KB
MD5

0be510a0d9fb6ddd09159e0a4e9ee7ab
SHA1

e93f6327a1e4ee22bb593a0efd95d06db27b7028
SHA256

ec867aa47b6454a6ee6192d3aaea986f38000b8471c7f7bd8de4b4b23cb50d21
SHA512

d5dde8b396df0ecb3d4315a7e9af605204b4760679d0511fb76ec7142ecdcfd3b74cd4d55114aa2f844925d5da6dbc0e45d6745103c41a193e93dca658bb988a
SSDEEP

1536:2GqSj0BNv1eDH4tfBuG669mvqtFyfcUUIlp+lHHZGF4xMvgec9Aj048cOTOA1Eo2:uBJ1eT4V/7/tFyzUI6HkFsej04884D2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0be510a0d9fb6ddd09159e0a4e9ee7ab_JaffaCakes118

Files

0be510a0d9fb6ddd09159e0a4e9ee7ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4172612de0a3bb5d9397cade64109df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenu
BlockInput
CopyImage
DrawIconEx
CopyRect
AppendMenuA
IsMenu
CalcMenuBar
GetDlgItem
CreateIcon
InsertMenuA
LoadCursorA
DrawIcon
GetWindowTextLengthA
GetDC
DrawTextW
GetFocus
DialogBoxParamA

kernel32

lstrcmpiA
ExitProcess
GetCommandLineA
WideCharToMultiByte
GlobalFree
GetOEMCP
GetCommandLineW
GetStringTypeA
GetLogicalDrives
HeapAlloc
GetCPInfo
GetFileAttributesA
GetLastError
GetFileType
GetLocalTime
GlobalAlloc
DeleteFileA
lstrcmpA
HeapFree
Sleep
GetLastError
FreeConsole
GetLocalTime
FreeConsole
HeapAlloc
FreeConsole
Sleep
FreeConsole
lstrcatA
FreeConsole
GetFileType
FreeConsole
GetModuleFileNameA
FreeConsole
GetStringTypeW
FreeConsole
WideCharToMultiByte
FreeConsole
ExitProcess
FreeConsole
lstrcmpA
GetFileType
GetFileSize
GetCommandLineW
GetOEMCP
FreeLibrary
lstrcpynA
lstrcpyA
lstrcatA
GlobalAlloc
GetCPInfo
HeapFree
lstrcmpiA
GetLocalTime
GlobalFree
ExitProcess
GetStringTypeW
GetLastError
GetLastError
GetModuleHandleA
HeapAlloc

advapi32

RegOpenKeyA
RegCreateKeyExW
RegReplaceKeyA
RegQueryValueA
RegEnumKeyA
RegQueryValueW
RegQueryValueExW
RegOpenKeyExA
RegEnumKeyExA
RegFlushKey
RegDeleteKeyW
RegOpenKeyExW
RegLoadKeyA
RegLoadKeyW
RegGetKeySecurity
RegDeleteValueW

Sections

.tdxt
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdada
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 3KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idada
Size: 2KB - Virtual size: 474B

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4172612de0a3bb5d9397cade64109df

Headers

File Characteristics

Imports

user32

kernel32

advapi32

Sections

.tdxt Size: 19KB - Virtual size: 18KB

.rdada Size: 107KB - Virtual size: 107KB

.edata Size: 3KB - Virtual size: 140KB

.reloc Size: 5KB - Virtual size: 7KB

.idada Size: 2KB - Virtual size: 474B

.tdxt
Size: 19KB - Virtual size: 18KB

.rdada
Size: 107KB - Virtual size: 107KB

.edata
Size: 3KB - Virtual size: 140KB

.reloc
Size: 5KB - Virtual size: 7KB

.idada
Size: 2KB - Virtual size: 474B