2f7af1ffcf878264fa1eb8babdbc9a9a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2f7af1ffcf878264fa1eb8babdbc9a9a_JaffaCakes118
Size

84KB
MD5

2f7af1ffcf878264fa1eb8babdbc9a9a
SHA1

ec73d5e2520749f8025162497f04d291c50877bb
SHA256

0f98ed8c2a02e8cb32bcf5953fa23ff595413dc18c1e5d6336c8011cdc4e973e
SHA512

66a939edde92b9d529a4485f7c7604230cc5e2d9af5557128bc960ee3be0572148f6a5eb526b7dd773e8583ffbd1596784d1096aa6d948fb3a563d0839db4cd6
SSDEEP

1536:C1oS1FZhXAu07LwHOqOwhpzomxvDUqcHKG61YYWqoqtt:hS1dXAfj2C04qmX79u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f7af1ffcf878264fa1eb8babdbc9a9a_JaffaCakes118

Files

2f7af1ffcf878264fa1eb8babdbc9a9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d63b5a095040efa75add9eaf0808b31e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateSolidBrush
CancelDC
GetPixel
CloseFigure
AddFontResourceW
AddFontResourceExA
AddFontResourceExW
AddFontResourceTracking
SetTextColor
BeginPath
DeleteObject
GetBrushOrgEx
ExcludeClipRect
GetPixel
GetClipBox
GetCurrentPositionEx
CloseMetaFile

kernel32

GetModuleHandleA
GetCommandLineA
lstrcpynA
GetStringTypeW
GetFileAttributesA
GetModuleFileNameA
CloseHandle
HeapFree
lstrcmpA
GlobalFree
SetLastError
GetLastError
lstrcatA
GetStdHandle
GetFileType
GetFullPathNameA
GetLocalTime
DeleteFileA

comctl32

ImageList_LoadImageA
ImageList_DragLeave
ImageList_Replace
ImageList_BeginDrag
ImageList_Destroy
ImageList_GetIconSize
ImageList_LoadImage
ImageList_AddMasked
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_Remove
ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_DragMove
ImageList_Copy

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegReplaceKeyW
RegQueryValueA
RegCreateKeyW
RegEnumKeyW
RegCreateKeyExW
RegEnumValueA
RegLoadKeyA
RegOpenKeyW
RegDeleteValueW
RegQueryValueExA
RegQueryInfoKeyW
RegDeleteValueA
RegEnumKeyA
RegQueryValueExW
RegLoadKeyW

user32

CreateIcon
DrawIcon
CopyImage
DrawIconEx
IsWindow
GetCursor
AppendMenuA
IsMenu
AppendMenuW
InsertMenuA
AlignRects
GetDC
CopyRect
CalcMenuBar
GetWindowTextA
GetFocus
EndDialog
CloseWindow
DialogBoxParamA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d63b5a095040efa75add9eaf0808b31e

Headers

File Characteristics

Imports

gdi32

kernel32

comctl32

advapi32

user32

Sections

.text Size: 8KB - Virtual size: 4KB

.data Size: 64KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 100KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 4KB

.data
Size: 64KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 100KB

.rsrc
Size: 4KB - Virtual size: 1KB