8d34bfb3ed65f4c189882b78c171c391_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8d34bfb3ed65f4c189882b78c171c391_JaffaCakes118
Size

170KB
MD5

8d34bfb3ed65f4c189882b78c171c391
SHA1

00e47ce083c3f14f1468df409af8e666bf5e8d92
SHA256

dc4abdd18773256ae1bf623767984a34f58c3c2c213cb71e51807ec765ce1dca
SHA512

5cf8d8eb8b8eea332ae9e70a4e86cf9a64102a552ce41f57bcfafa9e9a7c690a75e7a443f5f2afab1d5d208ee31b5b2381a33aeacbbc3a07baad1a97db9c0e86
SSDEEP

3072:LKaEvyj9h1pQyy2woldySHU98gsP5ygU:LKLqjn1eyyKhH6i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d34bfb3ed65f4c189882b78c171c391_JaffaCakes118

Files

8d34bfb3ed65f4c189882b78c171c391_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b31f5459baf0caf36d033a093fe5457b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

SetScrollInfo
ChildWindowFromPoint
GetActiveWindow

gdi32

CreateDIBSection
SetTextColor
GetBitmapBits
SetBkMode
CreatePalette
RestoreDC
GetDIBits
CreateCompatibleDC
SelectPalette
SetPixel

advapi32

RegCreateKeyA
GetLengthSid
RegEnumValueA
RegCreateKeyExA

kernel32

VirtualAlloc
GetCommandLineA
GetACP
GetCommandLineW
ExitThread
LocalAlloc
GetProcAddress
GetVersionExA
IsBadReadPtr
LoadLibraryExA
GetModuleHandleA
ExitProcess
GlobalAlloc

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES80
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES83
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES56
Size: 1024B - Virtual size: 875B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES12
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES86
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES57
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES36
Size: 1024B - Virtual size: 761B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES03
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b31f5459baf0caf36d033a093fe5457b

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 138KB - Virtual size: 138KB

RES80 Size: 512B - Virtual size: 511B

RES83 Size: 1024B - Virtual size: 809B

RES56 Size: 1024B - Virtual size: 875B

RES12 Size: 2KB - Virtual size: 1KB

RES86 Size: 1KB - Virtual size: 1KB

RES57 Size: 1024B - Virtual size: 738B

RES36 Size: 1024B - Virtual size: 761B

RES03 Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 138KB - Virtual size: 138KB

RES80
Size: 512B - Virtual size: 511B

RES83
Size: 1024B - Virtual size: 809B

RES56
Size: 1024B - Virtual size: 875B

RES12
Size: 2KB - Virtual size: 1KB

RES86
Size: 1KB - Virtual size: 1KB

RES57
Size: 1024B - Virtual size: 738B

RES36
Size: 1024B - Virtual size: 761B

RES03
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB