14fe000e8191035373d2aa0c59108b3e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

14fe000e8191035373d2aa0c59108b3e_JaffaCakes118
Size

62KB
MD5

14fe000e8191035373d2aa0c59108b3e
SHA1

3f1fa936bc64002acf7e38ac2bd717ebd3e9c014
SHA256

5444bf6fda44f7db77d9bd5c8eeab6f48c2330a8287c650fb80c478307db242a
SHA512

3684fdbc0a0c9586f6680f82418ff7290fb270caf1995ee25ff274db00fbf11c00247095c57702ee30ca99134826ee4650780364b5b47a740bfb2748ad254c95
SSDEEP

768:Xh9vPt5CMuePF4qoQLYN828XloGIu1IO03aQLpAotLkKs2yYilBZ2:x9LPF4e2828XloG/IVFeotQp2yY2BZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14fe000e8191035373d2aa0c59108b3e_JaffaCakes118

Files

14fe000e8191035373d2aa0c59108b3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e582f8c1dd80269c7e5b69f5ac628a6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
WriteFile
CloseHandle
FindResourceA
CreateFileA
GetVersion
GetStringTypeW
GetStringTypeA
LCMapStringW
LoadResource
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
SetFilePointer
LockResource
FreeResource
GetWindowsDirectoryA
LCMapStringA
GetSystemDirectoryA
GetLastError
IsBadCodePtr
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
FlushFileBuffers

user32

EndPaint
BeginPaint
DestroyWindow
PostQuitMessage
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 28B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e582f8c1dd80269c7e5b69f5ac628a6a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 32KB - Virtual size: 28KB

.text1 Size: 4KB - Virtual size: 28B

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 9KB

.data1 Size: 4KB - Virtual size: 324B

.rsrc Size: 44KB - Virtual size: 41KB

.text
Size: 32KB - Virtual size: 28KB

.text1
Size: 4KB - Virtual size: 28B

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 9KB

.data1
Size: 4KB - Virtual size: 324B

.rsrc
Size: 44KB - Virtual size: 41KB