4382060ac1f5007f4874456d6670f74d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4382060ac1f5007f4874456d6670f74d_JaffaCakes118
Size

158KB
MD5

4382060ac1f5007f4874456d6670f74d
SHA1

0e482b425db0ca44817e473cc68d5331cf765f47
SHA256

292c148a44b72cf897175c8c9735413db1179b7ee927b6bcf5ec8f33a1ebddb3
SHA512

ef5a586f0dd2d2e2307d5a016f5293b622e9db1e6be15cccff6cca7bed52539e988e09bf2ed855320d8753d1fbf633bcbbad49391e65d68e1a9b17db10eba49e
SSDEEP

3072:mVkI2+obivqdBaYUS/4XtUqeytmA/1Yuy0FB:mVkv+C4qdsYmCu1YA/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4382060ac1f5007f4874456d6670f74d_JaffaCakes118

Files

4382060ac1f5007f4874456d6670f74d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7897f50392c5881e5da0d6808ae430b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libgimpui-2.0-0

gimp_export_image
gimp_ui_init

libgimp-2.0-0

gimp_drawable_detach
gimp_drawable_flush
gimp_drawable_get
gimp_drawable_offsets
gimp_drawable_type
gimp_image_delete
gimp_image_get_colormap
gimp_image_insert_layer
gimp_image_new
gimp_image_set_colormap
gimp_image_set_filename
gimp_install_procedure
gimp_layer_new
gimp_layer_set_offsets
gimp_main
gimp_pixel_rgn_get_rect
gimp_pixel_rgn_init
gimp_pixel_rgn_set_rect
gimp_procedural_db_get_data
gimp_procedural_db_get_data_size
gimp_procedural_db_set_data
gimp_progress_init_printf
gimp_progress_update
gimp_register_magic_load_handler
gimp_register_save_handler

libgimpbase-2.0-0

gimp_filename_to_utf8
gimp_locale_directory

libintl-8

libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
calloc
fclose
fread
free
fseek
fwrite
memset
signal
strlen
vfprintf

libglib-2.0-0

g_file_error_from_errno
g_file_error_quark
g_fopen
g_free
g_log
g_malloc
g_set_error
g_strdup
g_strerror

libgobject-2.0-0

g_type_check_instance_cast

libgtk-win32-2.0-0

gtk_dialog_get_type
gtk_dialog_run
gtk_dialog_set_alternative_button_order
gtk_dialog_set_default_response
gtk_file_chooser_dialog_new
gtk_file_chooser_get_filename_utf8
gtk_file_chooser_get_type
gtk_file_chooser_set_filename_utf8
gtk_widget_destroy
gtk_widget_show

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 216B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/87
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/123
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/134
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7897f50392c5881e5da0d6808ae430b

Headers

File Characteristics

Imports

libgimpui-2.0-0

libgimp-2.0-0

libgimpbase-2.0-0

libintl-8

kernel32

msvcrt

libglib-2.0-0

libgobject-2.0-0

libgtk-win32-2.0-0

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 16B

.rdata Size: 1KB - Virtual size: 1KB

/4 Size: 512B - Virtual size: 344B

.bss Size: - Virtual size: 216B

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 68KB - Virtual size: 68KB

/14 Size: 512B - Virtual size: 264B

/29 Size: 1024B - Virtual size: 904B

/45 Size: 1KB - Virtual size: 1KB

/61 Size: 24KB - Virtual size: 23KB

/73 Size: 3KB - Virtual size: 2KB

/87 Size: 3KB - Virtual size: 3KB

/99 Size: 1024B - Virtual size: 964B

/112 Size: 512B - Virtual size: 432B

/123 Size: 7KB - Virtual size: 6KB

/134 Size: 1024B - Virtual size: 528B

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 16B

.rdata
Size: 1KB - Virtual size: 1KB

/4
Size: 512B - Virtual size: 344B

.bss
Size: - Virtual size: 216B

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 68KB - Virtual size: 68KB

/14
Size: 512B - Virtual size: 264B

/29
Size: 1024B - Virtual size: 904B

/45
Size: 1KB - Virtual size: 1KB

/61
Size: 24KB - Virtual size: 23KB

/73
Size: 3KB - Virtual size: 2KB

/87
Size: 3KB - Virtual size: 3KB

/99
Size: 1024B - Virtual size: 964B

/112
Size: 512B - Virtual size: 432B

/123
Size: 7KB - Virtual size: 6KB

/134
Size: 1024B - Virtual size: 528B