6a68d4e101fe69302a9c709e37176eab_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6a68d4e101fe69302a9c709e37176eab_JaffaCakes118
Size

485KB
MD5

6a68d4e101fe69302a9c709e37176eab
SHA1

0442e9c5d2837e31bf2d6c59790ed3a3c039fb73
SHA256

39dfcf30b58cbd42305f39dfebfe08c1b0d65130c48f9a04879a5cde8a6d723e
SHA512

66750e7ac06f9e9a5a32334f0b380ee6e1f0b2a93c4917b278a23d0f67fb90aea659e48db7de2d321ecfedacac8ef28fc6f9e8ee432701c0a6e4abb8b2f607f7
SSDEEP

3072:JFz5ErxskTWzHLADAaVRx5BTHZNh97YKm:JB5Erxs5rAUaVRPVvo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a68d4e101fe69302a9c709e37176eab_JaffaCakes118

Files

6a68d4e101fe69302a9c709e37176eab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b56314658df8fae4c2450b2558172081

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileA
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetTimeFormatA
GetStartupInfoA
GetProfileStringA
GetModuleHandleA
GetLocaleInfoA
GetLocalTime
GetLastError
GetDateFormatA
GetCommandLineA
ExitProcess
DeleteFileA
CreateFileA
OutputDebugStringA
ReadProcessMemory
GetCurrentProcess

user32

DispatchMessageA
TranslateMessage
GetMessageA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
LoadStringA
EndDialog

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajbk
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 11KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b56314658df8fae4c2450b2558172081

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 8KB - Virtual size: 8KB

.sdata Size: 112KB - Virtual size: 112KB

.reloc Size: 4KB - Virtual size: 4KB

.ajbk Size: 52KB - Virtual size: 52KB

.data Size: 184KB - Virtual size: 184KB

.idata Size: 44KB - Virtual size: 44KB

.rdata Size: 56KB - Virtual size: 56KB

.rsrc Size: 8KB - Virtual size: 8KB

.aspack Size: 4KB - Virtual size: 4KB

.adata Size: 11KB - Virtual size: 24KB

.text
Size: 8KB - Virtual size: 8KB

.sdata
Size: 112KB - Virtual size: 112KB

.reloc
Size: 4KB - Virtual size: 4KB

.ajbk
Size: 52KB - Virtual size: 52KB

.data
Size: 184KB - Virtual size: 184KB

.idata
Size: 44KB - Virtual size: 44KB

.rdata
Size: 56KB - Virtual size: 56KB

.rsrc
Size: 8KB - Virtual size: 8KB

.aspack
Size: 4KB - Virtual size: 4KB

.adata
Size: 11KB - Virtual size: 24KB