2fdb1438a241e5d10e24cb3cf554f4b1_JaffaCakes118

General

Target

2fdb1438a241e5d10e24cb3cf554f4b1_JaffaCakes118
Size

326KB
MD5

2fdb1438a241e5d10e24cb3cf554f4b1
SHA1

007588e1d7eafe9c41b5caae904e46e52bee0458
SHA256

db94883780fcf166a0265b5f645531bed4b48308d3185395863150acb2733fad
SHA512

e5a74b98406bf5d2237c8115315a83be880a2d7ddbff1afed39c476e6d4b6ddcfd813e88106ccce67d6df9e9aa94ab59817c217475feaf53a9f240ed8195d725
SSDEEP

3072:Kg5pb3y73ECY2LtvWaGEKu172M5iSjOHLaMCty/iRZiZAyLfKc5Vr/bLtbglq3k:KgD3yjE+5OaGK1d5iSjmWs/IonFc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fdb1438a241e5d10e24cb3cf554f4b1_JaffaCakes118

Files

2fdb1438a241e5d10e24cb3cf554f4b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25bf3250fcff0d1f75d52afead4f7559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragFinish
ExtractIconW
FindExecutableW
SHAppBarMessage
SHCreateDirectoryExA
SHGetSpecialFolderLocation
ShellExecuteA
ShellExecuteEx
Shell_NotifyIconW

gdi32

BitBlt
CombineRgn
DeleteObject
ExtTextOutA
GetBrushOrgEx
GetCharWidthA
GetCurrentPositionEx
GetTextExtentPointW
RealizePalette
SelectClipRgn
SetBrushOrgEx

kernel32

DuplicateHandle
FileTimeToDosDateTime
FindFirstFileA
GetConsoleOutputCP
GetFileSize
GetSystemDirectoryW
GetSystemTimeAsFileTime
GlobalUnlock
LoadLibraryW
TlsGetValue

user32

AdjustWindowRectEx
CallWindowProcA
CharLowerA
DeleteMenu
DrawEdge
EnumWindows
EqualRect
GetClientRect
GetMenu
GetMessagePos
GetScrollRange
GetWindowTextA
InflateRect
IsIconic
IsWindow
KillTimer
LoadStringA
MessageBoxA
RegisterClassA
ReleaseCapture
SetPropA
SetScrollRange
SetTimer
SetWindowLongA
ShowCursor
WindowFromPoint
wsprintfA

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

27CcZz1U
Size: 120KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

25bf3250fcff0d1f75d52afead4f7559

Headers

File Characteristics

Imports

shell32

gdi32

kernel32

user32

Sections

.text Size: 87KB - Virtual size: 87KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 98KB - Virtual size: 97KB

.rsrc Size: 18KB - Virtual size: 17KB

27CcZz1U Size: 120KB - Virtual size: 140KB

.text
Size: 87KB - Virtual size: 87KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 98KB - Virtual size: 97KB

.rsrc
Size: 18KB - Virtual size: 17KB

27CcZz1U
Size: 120KB - Virtual size: 140KB