60a551be1429d357418a9fa6bf4b650e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

60a551be1429d357418a9fa6bf4b650e_JaffaCakes118
Size

436KB
MD5

60a551be1429d357418a9fa6bf4b650e
SHA1

f5165395699d5263e8c342619e5b05742a641e2a
SHA256

0ed72f2588b0170f6916650615c3db65b80293251ece0991187a8a01929d83c2
SHA512

562aba8ada611e184301518682cdd66402d82f67494181a467541ef3b8674d46551281968a91f185ceef00a1bed7852f12aa257a92001458825803fdd1a70084
SSDEEP

12288:/Mj3JLxp3/Uh6RqBqLcaQ+MKpzz0Z3gXoj9:Ej3JLxJNwBqwjvAgZ3gXo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60a551be1429d357418a9fa6bf4b650e_JaffaCakes118

Files

60a551be1429d357418a9fa6bf4b650e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8e5be6af3eef2645b3af3eac7a21cddd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
ReleaseDC
SetWindowPos
IsWindow
DispatchMessageA
EndPaint
GetDC
DestroyWindow
GetParent
ShowWindow
PeekMessageA
TranslateMessage
GetWindow
EnableMenuItem
GetWindowLongA
CreateWindowExA
BeginPaint
GetWindowRect
PostMessageA
SetWindowLongA
SetWindowTextA
CheckMenuItem
GetDlgItem
ScreenToClient
LoadCursorA
TrackPopupMenu
MoveWindow
MessageBoxA
SystemParametersInfoA
InvalidateRect
wsprintfA
GetClientRect
GetFocus
SetCursor

kernel32

GetProcAddress
GetStringTypeA
LeaveCriticalSection
InitializeCriticalSection
RtlUnwind
TlsSetValue
GetStdHandle
GetCommandLineA
GetConsoleOutputCP
GetFileAttributesA
WaitForSingleObject
HeapDestroy
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
LocalAlloc
FreeEnvironmentStringsW
GetLocaleInfoW
SetStdHandle
WideCharToMultiByte
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
VirtualAlloc
FindResourceA
VirtualFree
HeapCreate
GetCurrentThreadId
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
Sleep
HeapSize
GetCPInfo
GetCommandLineW
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
lstrlenA
LCMapStringW
GetLastError
InterlockedIncrement
HeapAlloc
CreateFileA
GetFileType
CreateFileW
GlobalLock
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
GetVersion
SetEndOfFile
GetConsoleMode
GlobalAlloc
TerminateProcess
MulDiv
SetUnhandledExceptionFilter
GetModuleHandleA
CreateMutexA
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
InterlockedDecrement
SetLastError
TlsGetValue
FindClose
GetEnvironmentVariableA
LocalFree
FreeLibrary
GetFullPathNameA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 400KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e5be6af3eef2645b3af3eac7a21cddd

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 28KB - Virtual size: 25KB

.data Size: 400KB - Virtual size: 397KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 25KB

.data
Size: 400KB - Virtual size: 397KB

.rsrc
Size: 4KB - Virtual size: 2KB