8cee397504e66173e79c53006b8f0be8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8cee397504e66173e79c53006b8f0be8_JaffaCakes118
Size

97KB
MD5

8cee397504e66173e79c53006b8f0be8
SHA1

0e82f232b613aa65ab45c936da801f0a66c90fd8
SHA256

05b4d97f8985ae46c3b9141b50e395931e13ce5f0798425c91aa11977dc0bad8
SHA512

fda282d1cc88c48265bb8661d93d6875280346ccbd731a9da55696c534887adda21b9479acf194e1856a2dff26843eebadfee08fa4ff764ac0663c6b0a253fa2
SSDEEP

768:MWfyZvsTyL/7G2go1C6xUrYOj9h1yVFhE1ap3ZmbcGk7pcu8YHS8fJdXktMKLqJY:LfyJBCECayj9h14QKQyJOSY/F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cee397504e66173e79c53006b8f0be8_JaffaCakes118

Files

8cee397504e66173e79c53006b8f0be8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b31f5459baf0caf36d033a093fe5457b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

SetScrollInfo
ChildWindowFromPoint
GetActiveWindow

gdi32

CreateDIBSection
SetTextColor
GetBitmapBits
SetBkMode
CreatePalette
RestoreDC
GetDIBits
CreateCompatibleDC
SelectPalette
SetPixel

advapi32

RegCreateKeyA
GetLengthSid
RegEnumValueA
RegCreateKeyExA

kernel32

VirtualAlloc
GetCommandLineA
GetACP
GetCommandLineW
ExitThread
LocalAlloc
GetProcAddress
GetVersionExA
IsBadReadPtr
LoadLibraryExA
GetModuleHandleA
ExitProcess
GlobalAlloc

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES80
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES83
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES56
Size: 1024B - Virtual size: 875B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES12
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES86
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES57
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES36
Size: 1024B - Virtual size: 761B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES03
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b31f5459baf0caf36d033a093fe5457b

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 138KB - Virtual size: 138KB

RES80 Size: 512B - Virtual size: 511B

RES83 Size: 1024B - Virtual size: 809B

RES56 Size: 1024B - Virtual size: 875B

RES12 Size: 2KB - Virtual size: 1KB

RES86 Size: 1KB - Virtual size: 1KB

RES57 Size: 1024B - Virtual size: 738B

RES36 Size: 1024B - Virtual size: 761B

RES03 Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 138KB - Virtual size: 138KB

RES80
Size: 512B - Virtual size: 511B

RES83
Size: 1024B - Virtual size: 809B

RES56
Size: 1024B - Virtual size: 875B

RES12
Size: 2KB - Virtual size: 1KB

RES86
Size: 1KB - Virtual size: 1KB

RES57
Size: 1024B - Virtual size: 738B

RES36
Size: 1024B - Virtual size: 761B

RES03
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB