63829d20adcd360b88db455acd88c78f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

63829d20adcd360b88db455acd88c78f_JaffaCakes118
Size

106KB
MD5

63829d20adcd360b88db455acd88c78f
SHA1

a8a46b6884c08188395ac86c93151fe2c645e86a
SHA256

c03886bd15cfca84ba6fd77e2b6eb8098d992485007fa8c14e5ea6b51963e25d
SHA512

667063873e436900955693854d78e8cbc5d543de7dcad5a83ac643d27d247027d431ab8b1ea6283985f1dc3cd2443d29f80eeefa58bc8e2a99c209a6249993d6
SSDEEP

1536:BSgRBa1pWx8DB3PHRokKQFrwmOFmJTxqTLPDUvJ3mMZ9wYEw0tAfxMDWifwoj+y5:bR81bB/ocCF8TQTreMTwUmQjXUJR8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63829d20adcd360b88db455acd88c78f_JaffaCakes118

Files

63829d20adcd360b88db455acd88c78f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4c2659c60a42fc94b6d7f0ae05a1b71d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\FormView\Font\Word.exe

Imports

user32

VkKeyScanA

kernel32

LoadLibraryA

Exports

Exports

?RestrictReason##YGPAXU_FILETIME###Z
?SeasonProgress@@YGPAXU_FILETIME@@@Z

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dinit
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cinit
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sinit
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cinit
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ginit
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jinit
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tinit
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pinit
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c2659c60a42fc94b6d7f0ae05a1b71d

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.dinit Size: 512B - Virtual size: 28B

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 101KB

.init Size: 512B - Virtual size: 181B

.cinit Size: 512B - Virtual size: 76B

.sinit Size: 1024B - Virtual size: 574B

.cinit Size: 7KB - Virtual size: 7KB

.ginit Size: 14KB - Virtual size: 14KB

.reloc Size: 1KB - Virtual size: 1KB

.jinit Size: 14KB - Virtual size: 14KB

.tinit Size: 14KB - Virtual size: 14KB

.pinit Size: 21KB - Virtual size: 21KB

.text
Size: 25KB - Virtual size: 24KB

.dinit
Size: 512B - Virtual size: 28B

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 101KB

.init
Size: 512B - Virtual size: 181B

.cinit
Size: 512B - Virtual size: 76B

.sinit
Size: 1024B - Virtual size: 574B

.cinit
Size: 7KB - Virtual size: 7KB

.ginit
Size: 14KB - Virtual size: 14KB

.reloc
Size: 1KB - Virtual size: 1KB

.jinit
Size: 14KB - Virtual size: 14KB

.tinit
Size: 14KB - Virtual size: 14KB

.pinit
Size: 21KB - Virtual size: 21KB