7808e179c713a334549e9387d735189b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7808e179c713a334549e9387d735189b_JaffaCakes118
Size

928KB
MD5

7808e179c713a334549e9387d735189b
SHA1

0bc296227bd4c6fe909ffb8d3642db277b3bf754
SHA256

c59b749927610a9e84a3035fdba8fc590bf5da9996acc1d77f8407c7569902eb
SHA512

e46de7ae1e2471f6cbd3c77be6863073e11b60589cebd3075ce7deb136575eeb534c0f9b86926709b7c2bd0b8b5d62765f4a12a2471b682cfed4091eb955e01a
SSDEEP

24576:pGVpHRwetST+JHimxet0C+B+NFhzt9qggTCUJ:YVp2eHJv6UmFY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7808e179c713a334549e9387d735189b_JaffaCakes118

Files

7808e179c713a334549e9387d735189b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9836602f5c7860c5099a4bac44571530

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalAppExitA
MoveFileExA
GetTickCount
lstrcmpiW
SystemTimeToFileTime
_llseek
GetTimeZoneInformation
CreateProcessA
GetWindowsDirectoryA
WritePrivateProfileSectionA
Beep
GetTempFileNameA
GlobalFindAtomA
GetFullPathNameA
OutputDebugStringA
GetCurrentDirectoryW
GlobalReAlloc
_lopen
GetAtomNameA
FindNextChangeNotification
_lread
RemoveDirectoryW
WriteConsoleOutputCharacterA
ScrollConsoleScreenBufferA
FreeEnvironmentStringsA
SuspendThread
EnumResourceLanguagesW
SetConsoleTitleA
EnumDateFormatsW
GetProcessTimes
GetBinaryTypeA
SwitchToFiber
_lclose
VirtualUnlock
SetHandleCount
CancelIo
SetEnvironmentVariableA
ExitProcess

user32

SetMenuInfo
SendMessageA
TrackPopupMenu
SetClassLongA
GetTitleBarInfo

ole32

OleSetContainedObject
OleCreateFromData
CoGetObject
OleRegGetMiscStatus

ws2_32

WSAHtons
WSAInstallServiceClassA
WSACleanup
WSACreateEvent
WSAEnumProtocolsW
WSASocketA
WSARecvFrom
inet_ntoa

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerFindFileA

comctl32

ImageList_GetImageInfo
ImageList_DragShowNolock
ord17

oleaut32

SafeArrayGetLBound

Sections

.text
Size: 4KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9836602f5c7860c5099a4bac44571530

Headers

File Characteristics

Imports

kernel32

user32

ole32

ws2_32

version

comctl32

oleaut32

Sections

.text Size: 4KB - Virtual size: 220KB

.text Size: 512B - Virtual size: 18B

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 600KB - Virtual size: 600KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 4KB - Virtual size: 220KB

.text
Size: 512B - Virtual size: 18B

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 600KB - Virtual size: 600KB

.rsrc
Size: 17KB - Virtual size: 16KB