a72eab0c8e5fbe812cc6f8b6a7a80776_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a72eab0c8e5fbe812cc6f8b6a7a80776_JaffaCakes118
Size

111KB
MD5

a72eab0c8e5fbe812cc6f8b6a7a80776
SHA1

f341381b916b8fc90f45b030ece96baaf575eccc
SHA256

7cf8d4fde35c4f1b93e12b1413a14f3eb531c8326433f97b2314c00ef4d9070f
SHA512

7c922253e4cff1c807d82e0a6d7f4e8821abd9e8e3eb260c48306c023332bdd714ca2772b64d1819f3589cbfbdc4f04eca99ad51bfe282f6e2921a3e0ae4a905
SSDEEP

1536:/Y3lOIc7J6mp2JzNUfUQ+3/6C4Vxex6nWe8zW3dBgJ+mo:/GOdcmpi2fEPKh8a3v8+t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a72eab0c8e5fbe812cc6f8b6a7a80776_JaffaCakes118

Files

a72eab0c8e5fbe812cc6f8b6a7a80776_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f52a72c40acad0a739cf7f92acc318bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
InitializeCriticalSection
GetFileAttributesA
ReadFile
GlobalDeleteAtom
VirtualAlloc
VirtualAllocEx
lstrcpynA
GetOEMCP
FindFirstFileA
MoveFileExA
GlobalAlloc
ExitThread
LocalFree
GetUserDefaultLCID
GetProcAddress
LoadResource
EnterCriticalSection
VirtualQuery
FormatMessageA
MulDiv
GetACP
WideCharToMultiByte
Sleep
GetVersionExA

version

VerFindFileA
VerQueryValueA

user32

GetActiveWindow
DispatchMessageA
GetSysColor
IsWindow
WaitMessage
ReleaseCapture
RegisterClassA
SetClipboardData
IsDialogMessageW
MessageBeep
GetKeyNameTextA
EnableScrollBar
InvalidateRect
UpdateWindow
InsertMenuItemA
IsWindowUnicode
CharUpperBuffA
GetWindowThreadProcessId
OpenClipboard
MessageBoxA
PtInRect
InflateRect
UnregisterClassA
GetCursor
GetWindow
SendMessageA
EnumChildWindows
DrawAnimatedRects
ClientToScreen
GetDlgItem
GetWindowTextA
GetKeyState
WindowFromPoint
GetFocus
CreateIcon
MoveWindow
GetKeyboardType
DeleteMenu
LoadCursorA
GetTopWindow
EnumThreadWindows
IsChild
DestroyMenu
DestroyWindow

shell32

SHGetDiskFreeSpaceA
SHGetDesktopFolder

gdi32

SetTextColor
GetClipBox
GetDCOrgEx
SetBkMode

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 419B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f52a72c40acad0a739cf7f92acc318bb

Headers

File Characteristics

Imports

kernel32

version

user32

shell32

gdi32

Sections

.text Size: 34KB - Virtual size: 34KB

.idata Size: 512B - Virtual size: 419B

DATA Size: 73KB - Virtual size: 73KB

BSS Size: 512B - Virtual size: 30B

.data Size: 512B - Virtual size: 154B

.text
Size: 34KB - Virtual size: 34KB

.idata
Size: 512B - Virtual size: 419B

DATA
Size: 73KB - Virtual size: 73KB

BSS
Size: 512B - Virtual size: 30B

.data
Size: 512B - Virtual size: 154B