8a2abc828ea35cbb069fd93bb41d88c5_JaffaCakes118

General

Target

8a2abc828ea35cbb069fd93bb41d88c5_JaffaCakes118
Size

138KB
MD5

8a2abc828ea35cbb069fd93bb41d88c5
SHA1

72e99cc4c3046643e0971ae6056056c85bf98b76
SHA256

e416835d54ee7331746d6ba6e0424ff6844dc01474b93463c3c494ccb5f63c8b
SHA512

d111ab2924d548e507612ca8c8ea3777e8239ec1876c0dcce363de7a5c72e311b303c4d0e59c4974ab25f989c8e351a707b52392ba245cde49da192442f9a0ce
SSDEEP

3072:gfEMlq7lqxRd9o3r5IyeVLQ/hiD0UW/xvGWJ/Pc:GEp8xO3r6yeVLQ/W0Cg/E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a2abc828ea35cbb069fd93bb41d88c5_JaffaCakes118

Files

8a2abc828ea35cbb069fd93bb41d88c5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ab31d4e983c5ea06351d6f6216fcada4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\FirmWork\Studio\Common\Bin.exe

Imports

gdi32

GetKerningPairsA

kernel32

GetProcessHeap

user32

VkKeyScanA
IsCharUpperW

Exports

Exports

?FancyBack@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?OptimusIO@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?OptionWindowGear@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?RegardSeven@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?RightApocoloptus@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SecureCheck@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SignSetupUp@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SmeltIron@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?StrongFontW@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?TaleRevert@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dat2
Size: 1024B - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data3
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dat1
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab31d4e983c5ea06351d6f6216fcada4

Headers

File Characteristics

PDB Paths

Imports

gdi32

kernel32

user32

Exports

Exports

Sections

.text Size: 85KB - Virtual size: 85KB

.data Size: 3KB - Virtual size: 2KB

.dat2 Size: 1024B - Virtual size: 58KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.data3 Size: 22KB - Virtual size: 21KB

.dat1 Size: 22KB - Virtual size: 21KB

.text
Size: 85KB - Virtual size: 85KB

.data
Size: 3KB - Virtual size: 2KB

.dat2
Size: 1024B - Virtual size: 58KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.data3
Size: 22KB - Virtual size: 21KB

.dat1
Size: 22KB - Virtual size: 21KB