444773e2dacf3d30446978ce002b48ef_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

444773e2dacf3d30446978ce002b48ef_JaffaCakes118
Size

165KB
MD5

444773e2dacf3d30446978ce002b48ef
SHA1

eae33b32547ef3961aa3b96880cbbf5dee621676
SHA256

1bcfdb790097324ab859a6113d5c2142b25333685bb18752a6cb38bb40680ecf
SHA512

d5116021f37e9e7a1d6b758ff0265c9f44d8c2119c26826eedcb5e9ca34e5edb6dc530896b2650e1a520f8d11998af8138a11e8e4e30a33880b5c0659019bbc2
SSDEEP

3072:CkhDY9OiVhIYfP8XAvtEy+zc1kTWH5IyOJ0vxEE23AOLAW7:xNOpn8XuuRzc1sQ5Ia72x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
444773e2dacf3d30446978ce002b48ef_JaffaCakes118

Files

444773e2dacf3d30446978ce002b48ef_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9ff3e766a7d5cbdb3584f29111ac9308

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
LocalFlags
HeapCreate
ContinueDebugEvent
WritePrivateProfileStructA
BuildCommDCBAndTimeoutsA
GetNumaAvailableMemoryNode
GetProcAddress
SetThreadIdealProcessor
GetWindowsDirectoryW
ClearCommError

user32

CharToOemBuffW
EnumDisplaySettingsA
IntersectRect
SetWindowRgn
CallMsgFilterW

gdi32

GetTextCharsetInfo
PolyDraw
GetEnhMetaFileBits
CreatePalette
GetRandomRgn
CreateBitmapIndirect
ExtTextOutW

Exports

Exports

FrajAn
FrajAoa
FrajAwnanj
FrajAy
FrajBen
FrajBxz
FrajBy
FrajCm
FrajCo
FrajCt
FrajCyvet
FrajDb
FrajDf
FrajDht
FrajDvpw
FrajEluvm
FrajErqmt
FrajFfhpfz
FrajFkz
FrajFovvcp
FrajFpjw
FrajFvj
FrajGvq
FrajGyu
FrajHq
FrajIdwey
FrajIh
FrajIhen
FrajIv
FrajJog
FrajJvjjvy
FrajKeexz
FrajKof
FrajKql
FrajKz
FrajLtcc
FrajLyvsrf
FrajMjwjx
FrajMlpt
FrajMngs
FrajMzba
FrajNcd
FrajNxfohl
FrajOhcb
FrajOjddf
FrajOvasqv
FrajPe
FrajPps
FrajPxtgt
FrajPyatme
FrajQbpiv
FrajQgb
FrajQhs
FrajQocjhx
FrajQskoyt
FrajRc
FrajRdasl
FrajRpnq
FrajRur
FrajRva
FrajRx
FrajSfj
FrajSkc
FrajSp
FrajTdvai
FrajTizaul
FrajTjoxkz
FrajTzbd
FrajUeqtpk
FrajUjsn
FrajUm
FrajUwkng
FrajVhd
FrajVjnse
FrajVxpjil
FrajWfib
FrajWnjtlw
FrajXajyp
FrajXdesc
FrajYnzqq
FrajYoqd
FrajZi
FrajZlenzr
FrajZlhyr
FrajZoiizb
FrajZplatw
FrajZui

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ff3e766a7d5cbdb3584f29111ac9308

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 132KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 392KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 132KB - Virtual size: 132KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 392KB

.reloc
Size: 16KB - Virtual size: 16KB