466a3bb744926e93f5997ade56e8ca19_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

466a3bb744926e93f5997ade56e8ca19_JaffaCakes118
Size

246KB
MD5

466a3bb744926e93f5997ade56e8ca19
SHA1

490bc4e70cb273ee319c95eb245a242f0d3d4a2a
SHA256

1796ff7f8b39235b92028aad1ca40a91c4d4f291a2172e1f5b1d5db9ea08d1f8
SHA512

9a6e91c547f6d4ca341b9cc6f5a8e7ff9d1666bc187ad34f06f078b3582978f00065c97299bdac2cdc39ecab9a7ddf7e5643bbf96b0ba3f84533debb03e84507
SSDEEP

6144:YC7GgUxTLYPTLM8/DtMbh7ZbPZgnRDNIN4gYQA:LyLYPg1ZbPZ62tA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
466a3bb744926e93f5997ade56e8ca19_JaffaCakes118

Files

466a3bb744926e93f5997ade56e8ca19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e2bce302c75471daf5a280ae1e1fe35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA
GetFileVersionInfoA
GetFileVersionInfoSizeA

user32

DrawFrameControl
SetPropA
DrawAnimatedRects
GetMenuItemInfoA
IsCharLowerA
MoveWindow
GetDC
LoadKeyboardLayoutA
ActivateKeyboardLayout
DrawTextA
GetSystemMenu
IsMenu
DispatchMessageW
SetWindowPos
IsChild
WaitMessage
DefMDIChildProcA
ShowOwnedPopups
GetScrollRange
DefFrameProcA
GetWindowTextLengthA
ClientToScreen
ScreenToClient
GetClassLongA
IsDialogMessageW
GetWindowThreadProcessId
UnregisterClassA
GetWindowDC
DefWindowProcA
GetClientRect
EnableScrollBar
TranslateMessage
GetClipboardData
GetClassNameA
GetDCEx
IntersectRect
GetMenu
RegisterClassA
CharLowerA
SetCursor
IsDialogMessageA
MessageBoxA
GetTopWindow
ShowWindow
GetSysColorBrush
RemoveMenu
IsCharUpperA
SetWindowLongA
GetKeyboardLayout
GetClassInfoA
PeekMessageA
RegisterClipboardFormatA
MsgWaitForMultipleObjects
CreatePopupMenu
ScrollWindow
DestroyWindow
SetCapture
GetWindowTextA
CharUpperBuffA
DrawIcon
IsDlgButtonChecked
IsZoomed

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
SHGetFolderPathA
SHGetDesktopFolder

kernel32

GetOEMCP
VirtualAllocEx
SetHandleCount
GetFileAttributesA
FindResourceA
DeleteCriticalSection
LockResource
ReadFile
lstrcmpA
MoveFileExA
GetModuleFileNameA
CloseHandle
LoadLibraryA
lstrcpynA
GetSystemDefaultLangID
GetProcAddress
GetUserDefaultLCID
GetStdHandle
GetStartupInfoA
GetProcessHeap
ExitProcess
GlobalFindAtomA

Exports

Exports

ZvQsOoC2hIrY

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 512B - Virtual size: 497B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e2bce302c75471daf5a280ae1e1fe35

Headers

File Characteristics

Imports

version

user32

shell32

kernel32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 198KB - Virtual size: 198KB

.edata Size: 4KB - Virtual size: 4KB

.badata Size: 512B - Virtual size: 497B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 198KB - Virtual size: 198KB

.edata
Size: 4KB - Virtual size: 4KB

.badata
Size: 512B - Virtual size: 497B

.rsrc
Size: 8KB - Virtual size: 8KB