8948d5b2e7923bc0a0ef7d392e68d2e0_JaffaCakes118

General

Target

8948d5b2e7923bc0a0ef7d392e68d2e0_JaffaCakes118
Size

271KB
MD5

8948d5b2e7923bc0a0ef7d392e68d2e0
SHA1

6b391d04e95a079588f57c8d6c5aab2f58a4bbba
SHA256

1a5aa8066a823ff43c522efde0abf77764ea285109c076509048cee03dff86b5
SHA512

fbd9249d8835f1bdb799c43f2f5c232fd9fc07f575dd977737f2a64abfb04852f146b0edf8c7575665a2f94765dc021d57517811df2f2c440aa81a2a7d99e2a4
SSDEEP

6144:/tBH7nDFf2o7slgyTz+hc40aEAPrbiMzeG4Kcy9q9WIUtzL2i2:HH7DJbt3zviMzepwwdUtz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8948d5b2e7923bc0a0ef7d392e68d2e0_JaffaCakes118

Files

8948d5b2e7923bc0a0ef7d392e68d2e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42be3b4306ba54c5e2afa15abdb44bd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ClearCommError
CompareStringW
CreateTapePartition
DeviceIoControl
EndUpdateResourceA
EnumTimeFormatsW
EscapeCommFunction
ExitProcess
GetCommandLineA
GetCurrentThreadId
GetDateFormatA
GetLogicalDriveStringsA
GetPrivateProfileSectionA
GetStartupInfoW
HeapCompact
IsDBCSLeadByte
IsValidLocale
SetCalendarInfoW
SetComputerNameA
SetCurrentDirectoryW
SetTapePosition
VerLanguageNameW
WaitForSingleObject
lstrcpynA

user32

AnyPopup
ClientToScreen
CloseClipboard
CloseWindow
CopyRect
DdeFreeStringHandle
DefMDIChildProcA
DispatchMessageW
EnumDesktopWindows
GetDialogBaseUnits
GetDoubleClickTime
IntersectRect
IsIconic
LoadStringA
MapDialogRect
SetClassWord
SetKeyboardState
SetSystemCursor
ToAscii
TranslateMessage
WINNLSEnableIME

gdi32

ArcTo
CloseFigure
CreateCompatibleBitmap
DescribePixelFormat
GdiFlush
GdiPlayDCScript
GetCharWidthA
GetEnhMetaFileBits
GetEnhMetaFileDescriptionA
GetOutlineTextMetricsW
GetROP2
GetTextCharsetInfo
PatBlt
SetBrushOrgEx
SetICMProfileA
SetMiterLimit
SetPixelFormat
SetPolyFillMode
SetRectRgn
SetTextJustification
SetWorldTransform

Sections

.text
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 267KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42be3b4306ba54c5e2afa15abdb44bd9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 512B - Virtual size: 16KB

.data Size: 267KB - Virtual size: 284KB

.rdata Size: - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 496KB

.text
Size: 512B - Virtual size: 16KB

.data
Size: 267KB - Virtual size: 284KB

.rdata
Size: - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 496KB