2f3a276e9790f2f58c90e9d49f2c614b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2f3a276e9790f2f58c90e9d49f2c614b_JaffaCakes118
Size

1.0MB
MD5

2f3a276e9790f2f58c90e9d49f2c614b
SHA1

b0941c44749fa70017e9fb2b30ecea7ad18eabef
SHA256

2f4b04f5f6b0fc9691f6cc3e9d7b625ba49d8b2803ebc6747cce13baaf282652
SHA512

e6fa699d862d8ffdf9ba82d8eb7536f1d2a254b5d5023d32a3ce0058efd0cc320424306cbdfd6c84d55faa8b26631622a1d78293338fa0a99ecb8144e80b856f
SSDEEP

24576:VAaGldFwd3jfA2ssmqQS9Sa4IeeulmGmpMFM84zzwH8F+hjIoXdImAgi:VAnad3jo2TmFS9SajeHopMFL4vwH8FgS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f3a276e9790f2f58c90e9d49f2c614b_JaffaCakes118

Files

2f3a276e9790f2f58c90e9d49f2c614b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d91545d2506f8687c6c8bc6011e227a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ArcTo
GetTextExtentPoint32A
GetViewportExtEx
GetFontData
GetLogColorSpaceA
DeleteDC
GetGlyphIndicesW
CreateFontA

kernel32

GetSystemDirectoryW
GetCommandLineW
ExitProcess
GetModuleHandleW
VirtualAlloc
CreateMailslotW
EnumResourceNamesW
SetLastError
SetConsoleScreenBufferSize
_llseek
GetCurrentProcessId
CopyFileA
RemoveDirectoryW

linkinfo

CompareLinkInfoVolumes
CompareLinkInfoReferents
IsValidLinkInfo
GetLinkInfoData
ResolveLinkInfoW
DestroyLinkInfo
CreateLinkInfoW
DisconnectLinkInfo
GetCanonicalPathInfoW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbs
Size: 5KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1.1MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1.2MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 1.2MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d91545d2506f8687c6c8bc6011e227a

Headers

File Characteristics

Imports

gdi32

kernel32

linkinfo

Sections

.text Size: 14KB - Virtual size: 14KB

.textbs Size: 5KB - Virtual size: 496KB

DATA Size: 1.1MB - Virtual size: 1.8MB

.edata Size: 1.2MB - Virtual size: 1.8MB

.orpc Size: 1.2MB - Virtual size: 1.7MB

.tls Size: - Virtual size: 7KB

.data Size: 512B - Virtual size: 24B

.rsrc Size: 93KB - Virtual size: 92KB

.reloc Size: 512B - Virtual size: 80B

.text
Size: 14KB - Virtual size: 14KB

.textbs
Size: 5KB - Virtual size: 496KB

DATA
Size: 1.1MB - Virtual size: 1.8MB

.edata
Size: 1.2MB - Virtual size: 1.8MB

.orpc
Size: 1.2MB - Virtual size: 1.7MB

.tls
Size: - Virtual size: 7KB

.data
Size: 512B - Virtual size: 24B

.rsrc
Size: 93KB - Virtual size: 92KB

.reloc
Size: 512B - Virtual size: 80B