8ba475cf8588fd6ba6f5a8d8e877f343_JaffaCakes118

General

Target

8ba475cf8588fd6ba6f5a8d8e877f343_JaffaCakes118
Size

129KB
MD5

8ba475cf8588fd6ba6f5a8d8e877f343
SHA1

d2ee028284b3b9b427a2d857931e1591b4257e17
SHA256

0d38bfcc57c44521219263ffdfd9f16ac415d2ec93542c9ef69ff3fa6424af0f
SHA512

46d9d3910b3a7dfb46960082ee6230877a3d771f58bc397f6a839e687d58ecdcd91d6e15da1cd001b0cd8c124864272e41804bfb6ec8c804b2ca925b400da085
SSDEEP

3072:GQRpZUICv75oUDJzgwEpLve7ijJ1Hi4ZeUjvLo4+u:Gvv5XJNiLve7KTTLoP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ba475cf8588fd6ba6f5a8d8e877f343_JaffaCakes118

Files

8ba475cf8588fd6ba6f5a8d8e877f343_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b08fac3301b719b1705e7b0ec79fbc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateBrushIndirect
SaveDC
GetTextColor
GetDCOrgEx

comctl32

ImageList_DrawEx
ImageList_Read
ImageList_Write
ImageList_Draw
ImageList_Remove
ImageList_Add
ImageList_Create
ImageList_GetBkColor
ImageList_Destroy
ImageList_DragShowNolock

kernel32

GetModuleHandleA
GetOEMCP
VirtualAlloc
ExitProcess
GetLocalTime
LoadLibraryA
VirtualAllocEx
GetLocaleInfoA

user32

GetMenu
KillTimer
IsZoomed
IsWindowUnicode
CharNextA
IsWindowEnabled
IsWindow

Exports

Exports

Raui_e3Ua
h8U5268l
HNs7d6xiX_u
XM57t8oqVCSu@16
_yWNPEj9l6s@16
vEEaBSlV2FtGdv
OJXiVW2smDZ@24
tnwy4G@20
_jTPJa@20
xwM5JDRXCZ@4
_8G4HnhgjWTMMS
yfC3JWtdPDyQDY@16
_flwQbd
wrmbjD
_Ld6diMm
c4pcrjHoBInB
VixY_
OGro3MDqdhUj_z@24
_e9n5kBXIILA9Wn@16
_HBpRZ6DW
x4qeXZSzqQ
_mGfMu0l33V3B
EEgrbF9LdijpC
_VqJaNeK52GI@24
3j1Gh3feu
pUN91AhJEz4Bp

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b08fac3301b719b1705e7b0ec79fbc4

Headers

File Characteristics

Imports

gdi32

comctl32

kernel32

user32

Exports

Exports

Sections

CODE Size: 12KB - Virtual size: 12KB

.data Size: 10KB - Virtual size: 113KB

.ihdata Size: 102KB - Virtual size: 101KB

.idata Size: 1024B - Virtual size: 884B

.thdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 12KB - Virtual size: 12KB

.data
Size: 10KB - Virtual size: 113KB

.ihdata
Size: 102KB - Virtual size: 101KB

.idata
Size: 1024B - Virtual size: 884B

.thdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB