38336b82ffd811b0934748ce4934609e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

38336b82ffd811b0934748ce4934609e_JaffaCakes118
Size

279KB
MD5

38336b82ffd811b0934748ce4934609e
SHA1

f137a012b991fede4769ec0e1b78cd784554d548
SHA256

7c25b33dabd266a371a02587226897dcdaec80e85c431552c91cabb562bab293
SHA512

cfc5093711c991b77c0d2d0838f53eaebb081f9f751ec26cde2b725639d3cb4407ce658ac72312abd7dc6da189cedc2e364ab39d8f87a94d48636261747aa7aa
SSDEEP

6144:R65IvGO8VY+qudlYy914ATDjxs8VW6zlnn3VxXaXuJdn3:wIvGO83f9KAds8VlzN3VxXaXG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38336b82ffd811b0934748ce4934609e_JaffaCakes118

Files

38336b82ffd811b0934748ce4934609e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebee0f4d66b684e5c36af3f7719d0c2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindowAsync
CascadeWindows
MessageBoxA
IsDialogMessageA
MapDialogRect
FindWindowA
GetSysColor
GetWindowTextLengthA
DialogBoxIndirectParamA
GetDlgCtrlID

ole32

CoRegisterPSClsid
CoGetStdMarshalEx
CoTaskMemRealloc
OleGetIconOfClass
CoGetCurrentProcess
CoMarshalHresult
CoGetClassObject
CoCreateInstance
CreateFileMoniker
GetHGlobalFromStream
CoGetPSClsid

oleaut32

UnRegisterTypeLi

comctl32

UninitializeFlatSB
ord14
DrawStatusTextW
ord6

shlwapi

StrChrIW
StrCmpNA
StrRChrIW
StrRStrIW
StrCSpnA
StrRChrW

kernel32

GetModuleHandleA
GetCurrentProcessId
TlsGetValue
GetCommandLineA
LCMapStringA
GetCurrentThreadId
GetCurrentThread
GetEnvironmentVariableA
GetStdHandle
GetProcAddress
GetOEMCP
GetStartupInfoA
GetUserDefaultLangID
LeaveCriticalSection
CompareStringA
LocalAlloc
VirtualUnlock
HeapReAlloc
ReleaseMutex
IsBadReadPtr
GetACP
ExitProcess
VirtualAlloc
GetCurrentProcess
FoldStringA
GetNumberFormatA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 402KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebee0f4d66b684e5c36af3f7719d0c2e

Headers

File Characteristics

Imports

user32

ole32

oleaut32

comctl32

shlwapi

kernel32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 402KB - Virtual size: 484KB

.tls Size: 512B - Virtual size: 12B

.CRT Size: 512B - Virtual size: 8B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 402KB - Virtual size: 484KB

.tls
Size: 512B - Virtual size: 12B

.CRT
Size: 512B - Virtual size: 8B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 2KB - Virtual size: 2KB