8927145d33eb5a0cb81a7d7c29f35e7b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8927145d33eb5a0cb81a7d7c29f35e7b_JaffaCakes118
Size

54KB
MD5

8927145d33eb5a0cb81a7d7c29f35e7b
SHA1

de56f0cb0ff1c1f63813ebe3bde46856db542214
SHA256

49ac77be07c376260c69bf3e924ab2c233007a522f2d226570f02916c736f47b
SHA512

2ab5bbd0e580298445e65f6100e4aff85998e0e99398329b5082d1aed3e91f04bd216c9dd4552a97e2e3e6de54cec3dc1b6c635cc2e5630e25eea452edbb74a9
SSDEEP

768:OnZoQsqZFzd9nYzuruCFVShpK/Q08DtxnvaSAUe4vYOGRgKXlE:OnuQswFzdmCXShpK40knvaSAyYHgKXlE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8927145d33eb5a0cb81a7d7c29f35e7b_JaffaCakes118

Files

8927145d33eb5a0cb81a7d7c29f35e7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f9341299f76d45d1dffca733179d1c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetFilePointer
ReadFile
SetEndOfFile
SetStdHandle
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetLastError
CreateMutexA
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
TerminateProcess
GetModuleFileNameA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
GetCurrentProcessId
CreateFileA
GetFileType
GetCurrentProcess
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
GetCurrentDirectoryA
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
DeleteFileA
GetTempPathA
GetCommandLineA
GetVersion
GetFileAttributesA
HeapFree
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
VirtualAlloc
CloseHandle
ExitProcess
HeapDestroy
HeapCreate
VirtualFree

user32

CreatePopupMenu
CreateWindowExA
RegisterClassA
UnregisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
WinHelpA
PostMessageA
SetTimer
DefWindowProcA
KillTimer
MessageBoxA
PostQuitMessage
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
AppendMenuA
InsertMenuA
TrackPopupMenu
LoadIconA
LoadStringA
IsWindow
DestroyMenu
LoadMenuA
GetSubMenu
RemoveMenu

advapi32

RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

shell32

Shell_NotifyIconA
ShellExecuteA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f9341299f76d45d1dffca733179d1c2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 2KB - Virtual size: 4KB

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 2KB - Virtual size: 4KB