a9d32ae43644e263f991d7e6d71992c7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a9d32ae43644e263f991d7e6d71992c7_JaffaCakes118
Size

77KB
MD5

a9d32ae43644e263f991d7e6d71992c7
SHA1

a142599c5305b83a7fa4b9d5347104a9797875a9
SHA256

c5c640117ca2ecabda2bd0c6f56b0bd0d56a816dfb4ebb529e719542967f9847
SHA512

ed682bc069e320d32db2d934bbf38ee91aec57bfc86a8193adbdcbcf8de2cadbdd9cdf70c5f94b07fc411bc0e92e2ab22d49fdf954c5270d75e2231a9569ec54
SSDEEP

1536:ykruyohNGidPT6p9Qu0+Ga2/xnWQuwLYVnrcY5n2TviQdgrsfroTEKZ:ykrzouiVTMWwyZ9uCUfl06FXEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9d32ae43644e263f991d7e6d71992c7_JaffaCakes118

Files

a9d32ae43644e263f991d7e6d71992c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4add477bc1e84e500caec928862eb399

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
GetDateFormatA
lstrlenA
VirtualAllocEx
GetCurrentThreadId
LoadLibraryA
GetThreadLocale
ExitProcess

comctl32

ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Read
ImageList_Draw
ImageList_DrawEx
ImageList_Add
ImageList_Create

user32

GetMenu
SetClipboardData
IsDlgButtonChecked
SetFocus
SetMenu
GetWindow
SetForegroundWindow

gdi32

CreatePalette
CreateCompatibleBitmap
GetTextColor

Exports

Exports

_TM0pCta@16
_veG0QUatL@16
qq7Z4X4aTYI@20
4AQgOq@12
_FV7NNKVi@20
akfBi6Lm
_xpWnoMc2aVE49@12
cO5OtVFd
_kqaZxmum
YyWiUrWt
_WX5lmlb
_PWn1Liu0
KbZBIf_
I7i2tuJlt@4
_bshkm8ZTHAI5@20
XCTvHVoMBqZ
93VytYzrIfCbh
_2FKDSYLt0fv2K
_H0RK5VCu3KAx
_6iDAnf@20
_fGLAnS@4
_IpcHzIF8IHi@4
_vcYCSF
z4bfbeo
WJpefxVt7RYLz@16
_8Da_YwmuyuP_d@16
Ch9VA2BcF@16
_mOzjH
_x8TuDF9BUQWs
_gUEZihZ8g
_ngbnW0t@24
AEDwrcwdw
_CtRvGxBUmR@16
_Ct5QSTMV3BSEo@4
0_IUiT1Y6@16
_4Ig0uQ4CryR2P
_Hbwwlx@20
75vqQ@24
FR82tB@4
_QnkXc0J3KkOn2
jKcdgvnI1w
c5me41d@16
_WVpSO74kXA
_3uo_sAvY1
kR4LjQE4hpEN15
x1K6128
EFegh7mJlk
_XvWL2WpSeZEcJ@16
_E7hSW@4
pd7m5yqTAxC2br

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 865B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4add477bc1e84e500caec928862eb399

Headers

File Characteristics

Imports

kernel32

comctl32

user32

gdi32

Exports

Exports

Sections

CODE Size: 15KB - Virtual size: 14KB

.data Size: 9KB - Virtual size: 9KB

.ihdata Size: 48KB - Virtual size: 48KB

.idata Size: 1024B - Virtual size: 865B

.thdata Size: 512B - Virtual size: 436B

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 15KB - Virtual size: 14KB

.data
Size: 9KB - Virtual size: 9KB

.ihdata
Size: 48KB - Virtual size: 48KB

.idata
Size: 1024B - Virtual size: 865B

.thdata
Size: 512B - Virtual size: 436B

.rsrc
Size: 1KB - Virtual size: 1KB