5f2c0ccedcce016444ae30ec46fae680_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5f2c0ccedcce016444ae30ec46fae680_JaffaCakes118
Size

85KB
MD5

5f2c0ccedcce016444ae30ec46fae680
SHA1

c14120f14e62bd0d56a93a172246124cf742b725
SHA256

535b4025092ecfb2d6cde20dce98f4dc2f4401695cec6bcc80ddcc1668f5cd93
SHA512

5a22f200fa7134111f62847625a930b9c060be9fb0aaa14d4549c9601c0a282fbd577c9914e8b8ec59febaa22318b04449fe5e2e509bf5610026a657a364161d
SSDEEP

1536:lDVsgE1b6zpcTobNDbxwAr/4THvO90tlEy4c0:BVsgCcLb9br8vO900

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f2c0ccedcce016444ae30ec46fae680_JaffaCakes118

Files

5f2c0ccedcce016444ae30ec46fae680_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc975be1bfc429af8a63fa4182a706fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHQueryInfoKeyA
PathFileExistsA
SHGetValueA
SHSetValueA
PathIsDirectoryA
SHStrDupA

kernel32

VirtualAlloc
WideCharToMultiByte
lstrcpyA
FindClose
SetHandleCount
GetStdHandle
GetVersion
LocalAlloc
GetCommandLineA
LoadLibraryA
GlobalAlloc
FreeResource
FormatMessageA
VirtualFree
IsBadHugeReadPtr
GetModuleHandleA
FindFirstFileA
VirtualQuery
ExitProcess
GetTickCount
GetLocalTime
ExitThread

user32

EqualRect
FillRect
GetMenuStringA
DestroyIcon
SetScrollInfo
InsertMenuItemA
EnableMenuItem
SetParent
CharNextA
MapVirtualKeyA
DrawFrameControl
EnableWindow
GetFocus
IsWindowEnabled
SetClassLongA
GetForegroundWindow
GetLastActivePopup
GetWindowTextLengthA
CharLowerA
MoveWindow
CreateMenu
InvalidateRect
DispatchMessageA
SetCursor
EmptyClipboard
GetSystemMetrics
GetMenu
SetFocus
CreateIcon
DefMDIChildProcA
GetKeyboardLayoutList
IsRectEmpty
RegisterClassA
GetCursor
InsertMenuA
EnableScrollBar
WaitMessage
DefFrameProcA
OpenIcon
GetScrollInfo
GetParent
GetDesktopWindow
IsZoomed
SetWindowTextA
SetActiveWindow
CharToOemA
GetCapture
LoadCursorA
PostMessageA
GetWindowRect
MessageBeep
GetMenuState
ClientToScreen
TrackPopupMenu
IsDialogMessageA
GetWindowPlacement
CharUpperA
OpenClipboard
EnumWindows
SetScrollPos
GetKeyboardState

Exports

Exports

_p8tcTHc3
_zjC50N7Rr@4
_AGgE6pOO@12

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc975be1bfc429af8a63fa4182a706fc

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 11KB - Virtual size: 34KB

.edata Size: 46KB - Virtual size: 45KB

.idata Size: 4KB - Virtual size: 3KB

.bdata Size: 512B - Virtual size: 482B

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 11KB - Virtual size: 34KB

.edata
Size: 46KB - Virtual size: 45KB

.idata
Size: 4KB - Virtual size: 3KB

.bdata
Size: 512B - Virtual size: 482B

.rsrc
Size: 9KB - Virtual size: 8KB