a0d015fac5d578922714e5942306c196_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a0d015fac5d578922714e5942306c196_JaffaCakes118
Size

2.8MB
MD5

a0d015fac5d578922714e5942306c196
SHA1

fde72d381162bebde13a0fc4eb93ae50e1d9746f
SHA256

da6af05d1e3f8bb0cbf73e6348ed253d5cfa9537d129752325f3f136ee563d8f
SHA512

854b4885c591051e41d526512265b0e2f2ae961b1fa4915f71a4c972fbed3275790ccbfddd407865482135fadab1712f09fbdafd8cf58bc33e941b4a97689929
SSDEEP

49152:AtbsC/0zpcEN+AxXQ4hB3km6QMEaEFphfW4XY55dwUECZ6WmZuqwl0i+Fp:AlsC/0NFdQWkmBf5LO4XmdzZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0d015fac5d578922714e5942306c196_JaffaCakes118

Files

a0d015fac5d578922714e5942306c196_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebadde75a0d128ad5346cbde6ded06f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFile
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetPropA

gdi32

CreatePolygonRgn

comdlg32

ChooseColorA

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

DragQueryFileA

comctl32

ImageList_GetImageInfo

oledlg

ord9

ole32

CLSIDFromString

olepro32

ord253

oleaut32

VariantCopy

ws2_32

htonl

wininet

InternetOpenA

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dat1
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dat0
Size: - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dat2
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dat3
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebadde75a0d128ad5346cbde6ded06f9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

wininet

Sections

.text Size: - Virtual size: 1.3MB

.rdata Size: - Virtual size: 132KB

.data Size: - Virtual size: 100KB

.idata Size: - Virtual size: 23KB

.dat1 Size: 24KB - Virtual size: 21KB

.dat0 Size: - Virtual size: 74KB

.dat2 Size: - Virtual size: 2.3MB

.dat3 Size: 2.8MB - Virtual size: 2.8MB

.reloc Size: 4KB - Virtual size: 248B

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: - Virtual size: 1.3MB

.rdata
Size: - Virtual size: 132KB

.data
Size: - Virtual size: 100KB

.idata
Size: - Virtual size: 23KB

.dat1
Size: 24KB - Virtual size: 21KB

.dat0
Size: - Virtual size: 74KB

.dat2
Size: - Virtual size: 2.3MB

.dat3
Size: 2.8MB - Virtual size: 2.8MB

.reloc
Size: 4KB - Virtual size: 248B

.rsrc
Size: 20KB - Virtual size: 17KB