412f656e73f3517bfffec71e726fcdae_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

412f656e73f3517bfffec71e726fcdae_JaffaCakes118
Size

20KB
MD5

412f656e73f3517bfffec71e726fcdae
SHA1

bdcb3915839690d031259de635a9e475c23a7d81
SHA256

cb38b2d7743ea72812edbc0c0b8d72ec8f5e1ae20d11c0d3d8365fcbb2b71803
SHA512

2ec84164919e92525bd4c022036c0e468394d2ec7f00ce2c84ee65945fbe5bcb7447270020290a778c0fdae9818a6bc2674382eeb102153b5f90ee6f1efe90fe
SSDEEP

384:gSYQEDeqR54oW8WkCfm91hGWyo+4XX6Y+BZD:gJFaU+Zu93NyttBZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
412f656e73f3517bfffec71e726fcdae_JaffaCakes118

Files

412f656e73f3517bfffec71e726fcdae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e4ffada0d4bb5946be829009347cc79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
lstrcpynA
lstrlenA
GetLastError
GetFullPathNameA
GetFileAttributesA
lstrcpynW
lstrlenW
GetFileAttributesW
FreeLibrary
MultiByteToWideChar
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
Sleep
LocalFree
GetTickCount
GetModuleFileNameW
GetVersionExW
LocalAlloc
LoadLibraryW
GetLocalTime
GetProcAddress
LoadLibraryA

user32

EnableWindow
SetForegroundWindow
SendMessageW
GetMenuState
ShowCaret
CreateAcceleratorTableW
SetTimer
GetMenuItemID
GetMenuInfo
PostMessageW
GetCapture
CreateDesktopA
GetSubMenu
wsprintfA
CreateDialogIndirectParamW
LoadMenuW
AppendMenuA
CharPrevA
SetWindowTextW
SetDlgItemInt
TrackPopupMenuEx
GetForegroundWindow
GetSysColor
TrackPopupMenu
IsWindow
LoadIconA
wsprintfW
GetDlgItemTextA
GetMessageW
DialogBoxParamA
AdjustWindowRect
GetCursorPos
CopyIcon
MonitorFromPoint
CreateDialogParamA
GetKeyState
SetCursor
CharNextA
SetDlgItemTextW
GetDCEx

advapi32

RegCreateKeyExW
RegEnumKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteKeyA

shell32

SHGetDesktopFolder

security

SealMessage
CompleteAuthToken

gdi32

CreatePolygonRgn
CreateScalableFontResourceW
StretchDIBits
GetTextExtentPointA
SelectBrushLocal
CreateFontIndirectExA
AddFontResourceW

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xSHu
Size: 2KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xCaD
Size: 104KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 4KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oBZ
Size: 5KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Pi
Size: 105KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e4ffada0d4bb5946be829009347cc79

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

security

gdi32

Sections

.text Size: 14KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 41KB

.xSHu Size: 2KB - Virtual size: 476KB

.xCaD Size: 104KB - Virtual size: 172KB

.G Size: 4KB - Virtual size: 125KB

.oBZ Size: 5KB - Virtual size: 464KB

.data Size: 6KB - Virtual size: 379KB

.Pi Size: 105KB - Virtual size: 166KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 14KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 41KB

.xSHu
Size: 2KB - Virtual size: 476KB

.xCaD
Size: 104KB - Virtual size: 172KB

.G
Size: 4KB - Virtual size: 125KB

.oBZ
Size: 5KB - Virtual size: 464KB

.data
Size: 6KB - Virtual size: 379KB

.Pi
Size: 105KB - Virtual size: 166KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1KB - Virtual size: 4KB