43b7ed48a4623a2b6ee6d752313fb6b4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

43b7ed48a4623a2b6ee6d752313fb6b4_JaffaCakes118
Size

2.1MB
MD5

43b7ed48a4623a2b6ee6d752313fb6b4
SHA1

6545230b371c8368554df5c4399bf26f9c6d2303
SHA256

a946de8d486a603f2ac89c50d0cc334aea41d3dd5f6d0457a7ae2f03dccd6cfc
SHA512

8031a157797edefaed329200b66628e9bc5d974dd635e4ec4a10acf1dbbd2598fdd82b09994cf19e435182309ed125dbe9253df574e4629f2b7fed6142f1856a
SSDEEP

49152:dTVB10bLQpuQHXBTot9s2Gqc54dnotG7xrGgjYHEY2ZS23GG+w97:dTDa/OuQHXBTotqJ5WnoKxrFYHZ6tt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b7ed48a4623a2b6ee6d752313fb6b4_JaffaCakes118

Files

43b7ed48a4623a2b6ee6d752313fb6b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3be0af1ca129a3ae0a31af04bf33e5c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PageSetupDlgW
ReplaceTextW

ws2_32

WSAUnhookBlockingHook
WSAHtons
WSAInstallServiceClassW
WSAGetQOSByName
WSASetLastError
WSASetBlockingHook

shell32

SHChangeNotify
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetSpecialFolderPathA

ole32

CoSwitchCallContext
OleSave

kernel32

GetTempPathW
GetCommState
GetTempFileNameA
SetConsoleTitleA
EnumCalendarInfoA
_lopen
FormatMessageA
SetFileAttributesA
GlobalFlags
CompareStringW
ExitProcess
GetTimeZoneInformation
GlobalDeleteAtom
SetCommTimeouts
CreateDirectoryExA
DebugBreak
EnumResourceNamesW
ScrollConsoleScreenBufferA
OutputDebugStringA
EnumTimeFormatsW
CancelIo
_hread
SetSystemTime
GlobalReAlloc
FindNextChangeNotification
ReleaseSemaphore
GetSystemDirectoryW
GetCommandLineW
CreateProcessA
_lread
GlobalAddAtomA
QueryDosDeviceW
GetCommConfig
VirtualQueryEx
GetFileType
LoadLibraryExA
SuspendThread
GetLogicalDriveStringsA
FlushConsoleInputBuffer
MoveFileW
ReadConsoleA

user32

GetSysColorBrush
GetMenu
CheckRadioButton
IsCharUpperA
DrawFocusRect
GetDCEx
CascadeWindows
CreateDialogParamA
InsertMenuItemA
SwitchToThisWindow
SetPropA

gdi32

MaskBlt
GetClipBox
PolyDraw
SelectClipRgn
GetTextExtentPointW
CreateCompatibleDC

Sections

.text
Size: 51KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3be0af1ca129a3ae0a31af04bf33e5c4

Headers

File Characteristics

Imports

comdlg32

ws2_32

shell32

ole32

kernel32

user32

gdi32

Sections

.text Size: 51KB - Virtual size: 267KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 51KB - Virtual size: 267KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 17KB - Virtual size: 16KB