4b459055ebdaa32c09460c9e1493257e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4b459055ebdaa32c09460c9e1493257e_JaffaCakes118
Size

60KB
MD5

4b459055ebdaa32c09460c9e1493257e
SHA1

6c1ab9c3fbec2420c8b96211b4fb7b80c059eb8f
SHA256

4799052f96093d30f376302049935620ce05f38975c073119a1a78f4b5ec21e5
SHA512

282d5b1fbe74c2445abb841705df84d35afb55e8f7d1c719d3fbea1191145599b3d3274b26f4e816b618e162028a17bb42b9a253bd4a221ec101074685ff9bfc
SSDEEP

768:Psj44SFkaaLPP+GizfclAzfvy1NQ/zY09OiJos/yQ:s44xeGYnzfvy1NQGios7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b459055ebdaa32c09460c9e1493257e_JaffaCakes118

Files

4b459055ebdaa32c09460c9e1493257e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a00e2b9746e702178568c8d65964e11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
DeleteFileA
CloseHandle
FindFirstFileA
OutputDebugStringA
GetCurrentDirectoryA
SetStdHandle
ReadFile
FlushFileBuffers
GetProcAddress
LoadLibraryA
VirtualAlloc
HeapAlloc
HeapReAlloc
LCMapStringW
LCMapStringA
SetFilePointer
GetACP
GetCPInfo
GetOEMCP
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
RtlUnwind
HeapFree
WriteFile
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
SetHandleCount
GetPrivateProfileStringA
GetFileType
WritePrivateProfileStringA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetLastError
GetModuleHandleA
GetPrivateProfileIntA
GlobalAlloc
GetSystemDefaultLangID
GetVersionExA
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetCommandLineA
SetEnvironmentVariableA
GetCurrentProcess
GetStartupInfoA
ExitProcess
GetVersion
TerminateProcess

user32

LoadCursorA
ReleaseDC
wsprintfA
MessageBoxA
SetCursor
GetDC
GetDesktopWindow
InvalidateRect
PtInRect
UpdateWindow
SetRect
DialogBoxParamA
PostQuitMessage
GetClientRect
GetSystemMetrics
DestroyWindow
DefWindowProcA
GetMessageA
CreateWindowExA
RegisterClassExA
GetDlgItem
TranslateMessage
DispatchMessageA
SendMessageA
SetWindowTextA
ShowWindow
IsDlgButtonChecked
BeginPaint
EndPaint
LoadImageA
EndDialog

gdi32

CreateCompatibleDC
GetStockObject
SetBkMode
GetDeviceCaps
GetObjectA
DeleteObject
DeleteDC
TextOutA
BitBlt
SetTextColor
CreateFontIndirectA
SelectObject

advapi32

RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

shell32

ShellExecuteA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5a00e2b9746e702178568c8d65964e11

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 331KB

Shared Size: 4KB - Virtual size: 11B

.rsrc Size: 8KB - Virtual size: 14KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 331KB

Shared
Size: 4KB - Virtual size: 11B

.rsrc
Size: 8KB - Virtual size: 14KB