8de6b9c86fb0a9ccd6706cd105ae10c2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8de6b9c86fb0a9ccd6706cd105ae10c2_JaffaCakes118
Size

125KB
MD5

8de6b9c86fb0a9ccd6706cd105ae10c2
SHA1

d9e5028cdea96ae5fecce65e1e391964961f5b50
SHA256

4907f3e5f6e1297e4dda82b77c64cab11f609ad7bfaaa58d14fbefba9acf1885
SHA512

9c10c676bd722289ab679b6dd8e6d68cbccea6b9406d16b3b437f9d2cb384a5e8277407e952f8b50ab97b7fb84f09e1cfcbaef8634aa68dd557eca9c791d9efc
SSDEEP

3072:3LdgtDOi5AUWQMShQkFwzNoLKj3RShmzbLa:JYnAUW5ShQ5zNoK3YE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8de6b9c86fb0a9ccd6706cd105ae10c2_JaffaCakes118

Files

8de6b9c86fb0a9ccd6706cd105ae10c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a79c9a535687d057a18ade1b798920a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

MoveToEx
CreateCompatibleBitmap
DeleteObject
CreatePen
SelectObject
DeleteDC
CreateCompatibleDC
LineTo
BitBlt
GetDeviceCaps

user32

SetWindowLongA
SetFocus
LoadIconA
ShowWindow
GetWindowLongA
GetSystemMetrics
GetDlgItem
EndPaint
GetDC
CreateWindowExA
ReleaseDC
GetWindowRect
MoveWindow
EndDialog
EnableWindow
DialogBoxParamA
BeginPaint
wsprintfA
SendMessageA

kernel32

LoadResource
MulDiv
SizeofResource
SetLastError
LockResource
GetVersionExA
FindResourceA
lstrcpyA
CreateFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetModuleHandleA
GetProcAddress
VirtualProtect
LoadLibraryA
Sleep
VirtualAlloc
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

comctl32

InitCommonControls

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA

ole32

CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc

oleaut32

OleLoadPicture

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TVM0
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.TVM1
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9a79c9a535687d057a18ade1b798920a

Headers

File Characteristics

Imports

gdi32

user32

kernel32

comctl32

advapi32

ole32

oleaut32

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 1024B

.rsrc Size: 72KB - Virtual size: 71KB

.TVM0 Size: 11KB - Virtual size: 11KB

.TVM1 Size: 31KB - Virtual size: 30KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 1024B

.rsrc
Size: 72KB - Virtual size: 71KB

.TVM0
Size: 11KB - Virtual size: 11KB

.TVM1
Size: 31KB - Virtual size: 30KB