4012920ff74686636af093fbe52c5dbf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4012920ff74686636af093fbe52c5dbf_JaffaCakes118
Size

327KB
MD5

4012920ff74686636af093fbe52c5dbf
SHA1

0a46ecb33a9c501f771c1bc8afcc1835636628c8
SHA256

fbde02f9a79bf129d8662e4619d8a123c99a1a25c342ccb0b5633b64d2d15257
SHA512

0ae3e7dfea59856ce8d84fcfa532a7a8fb8147efb9215ff4130b2b264b25a6345336f5b65a9646d3e7c6007f68db93e17d42e494f136ccb93bc5dc9edf8c01e0
SSDEEP

6144:Jl9ihpQTluM3eRQBZ5kfBuAr88U1YifLY/qTAH/sqXpG8cRCvBPd:JUwuM3zZ2ZN8kiKmCBpGTS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4012920ff74686636af093fbe52c5dbf_JaffaCakes118

Files

4012920ff74686636af093fbe52c5dbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85b51c3b4fb623e61fdb52c2ddcc93b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

GetKeyboardType
DestroyWindow
MessageBoxA
CharNextA

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
VirtualQuery
GetStartupInfoA
GetModuleFileNameA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
VirtualAllocEx
SizeofResource
ReadProcessMemory
LockResource
LoadResource
LoadLibraryA
GlobalUnlock
GlobalReAlloc
GlobalHandle
GlobalLock
GlobalFree
GlobalAlloc
GetThreadContext
GetProcAddress
FreeLibrary
FindResourceA
CreateProcessA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

85b51c3b4fb623e61fdb52c2ddcc93b4

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

Sections

.text Size: 21KB - Virtual size: 21KB

.itext Size: 1024B - Virtual size: 760B

.data Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 13KB

.idata Size: 1KB - Virtual size: 1KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 294KB - Virtual size: 294KB

.text
Size: 21KB - Virtual size: 21KB

.itext
Size: 1024B - Virtual size: 760B

.data
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 13KB

.idata
Size: 1KB - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 294KB - Virtual size: 294KB