8abf30c31b2aee95bcf93ee8dd3def90_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8abf30c31b2aee95bcf93ee8dd3def90_JaffaCakes118
Size

64KB
MD5

8abf30c31b2aee95bcf93ee8dd3def90
SHA1

a321fe0dcc3d19cc4e5503a94da01107c040514d
SHA256

4d299103af38aea3ffc0c6a3d491b321c7cd8b778abed2b85f84cc324faaf222
SHA512

cd732b9f942642e3270d875657bea11c4987227c472137e5af6745c74bff2f21860bd35b3904fe416f331bba6eca5cbcfc0ff6cb9850038a3668182eb372e3a3
SSDEEP

1536:1SftTrR3Hc+s26SjEfVxkamF3cwF5dlh+7oT5q2anJO:1SfFrR3HZN6SAnkpMe5M7oTs7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8abf30c31b2aee95bcf93ee8dd3def90_JaffaCakes118

Files

8abf30c31b2aee95bcf93ee8dd3def90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db1033c2204149580de55e93ee371f74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetExitCodeThread
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetShortPathNameA
FindResourceExA
EnumResourceLanguagesA
ResumeThread
WriteProcessMemory
SetFileAttributesA
CreateDirectoryA
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

3
Size: - Virtual size: 336B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 512B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 40KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: 7KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

db1033c2204149580de55e93ee371f74

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 4KB - Virtual size: 7KB

1 Size: 512B - Virtual size: 28B

2 Size: 512B - Virtual size: 480B

3 Size: - Virtual size: 336B

4 Size: 512B - Virtual size: 836B

5 Size: 5KB - Virtual size: 5KB

6 Size: 40KB - Virtual size: 55KB

7 Size: 4KB - Virtual size: 3KB

8 Size: 7KB - Virtual size: 30KB

0
Size: 4KB - Virtual size: 7KB

1
Size: 512B - Virtual size: 28B

2
Size: 512B - Virtual size: 480B

3
Size: - Virtual size: 336B

4
Size: 512B - Virtual size: 836B

5
Size: 5KB - Virtual size: 5KB

6
Size: 40KB - Virtual size: 55KB

7
Size: 4KB - Virtual size: 3KB

8
Size: 7KB - Virtual size: 30KB