19affea9bb25739e931e844daf227095_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

19affea9bb25739e931e844daf227095_JaffaCakes118
Size

116KB
MD5

19affea9bb25739e931e844daf227095
SHA1

722eb20b01ebb41d6212c528f1de74a17eacb773
SHA256

419b13f91f3121040b3f297e73b7178958aaa78d18b96888dace4f2ad2a6f526
SHA512

a6b9cb6b8495010a17853608c177f6fcfd6fb34fb1943c03a1dbd0bf31a2137aa2c28fb13efe3b4d4fda9eab901c5aa697012462f209492ecfb6ab1610676708
SSDEEP

3072:98RTVXDNJqxSA5HDc3I3nNoOsRXurRUQzj+5i/U:SZRcx5VMpOKXur2Qf+5i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19affea9bb25739e931e844daf227095_JaffaCakes118

Files

19affea9bb25739e931e844daf227095_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a3a898aaad84051a2ac225fe198c37a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePenIndirect
SelectPalette
CreateDIBSection

version

GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA

kernel32

LoadResource
LoadLibraryExA
LoadLibraryA
lstrlenA
VirtualAllocEx
InitializeCriticalSection

user32

EndDialog
SystemParametersInfoA
GetMenuItemCount
WaitMessage
TranslateMessage
PostQuitMessage
DestroyWindow
DrawEdge
RemovePropA
PeekMessageW
GetClipboardData
SetScrollInfo
EnableWindow
OpenClipboard
GetMenu
CharLowerBuffA
GetClassLongA
SetMenuItemInfoA
MessageBeep
InflateRect
GetWindowRect
ReleaseCapture
IsWindowVisible
DispatchMessageA
DestroyCursor
DrawMenuBar
ChildWindowFromPoint
CharNextW
InvalidateRect
SendMessageA
EnumChildWindows
GetKeyNameTextA
MessageBoxA
AdjustWindowRectEx
PeekMessageA
CharNextA
MsgWaitForMultipleObjects
IsMenu
GetScrollRange
WindowFromPoint
GetWindowThreadProcessId
CreatePopupMenu
UnhookWindowsHookEx
CharLowerA
DestroyMenu
IntersectRect
EnableMenuItem
GetKeyboardState
GetLastActivePopup
IsChild
IsIconic
TrackPopupMenu
SetRect
GetSystemMenu
GetWindowDC
GetKeyState
KillTimer
DefFrameProcA
SetParent
wsprintfA
SetWindowPos
EndPaint
GetKeyboardType
GetTopWindow
GetDC
DefMDIChildProcA
BeginPaint
SetScrollRange
MoveWindow
EnumThreadWindows
GetKeyboardLayoutNameA
SetScrollPos
UpdateWindow
GetParent

Exports

Exports

_D2cvaerX@24
_qGQuDZiY@16
q5obCk3S@16
_18H7KG@24
iUbTehlF1e8n
_nJ5fZj8bYRCkQF
izYHSM
_Uvyn1J4qas
jEflHjHDiP@16
_Jfeg3o1veiT
_YS3QKKguc6Y_Q
X93EFTjfWcdz8E@4
rczvj5o4eHah@16
_EDtMxN@16
_v75fhfNpnwS@4
_o7g7eH@24
WMWtLt7a8V@8
_FQG0bU_Yx27l4@12
Oz4wdVaw@16
7PmZCcu8h
Ts2J_cUhKfajX@4
lo212SxwdC5_@12
_GHMVT21NQ@4
k5SSpg89W94pNC
gizl0l@8
xaGEUtSbTSyJN@8
LXtIWw64h@8

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a3a898aaad84051a2ac225fe198c37a

Headers

File Characteristics

Imports

gdi32

version

kernel32

user32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 143KB

.data Size: 98KB - Virtual size: 98KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 143KB

.data
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 2KB - Virtual size: 1KB