aa860c782e5fe4cf4fed0d1c958a6080_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

aa860c782e5fe4cf4fed0d1c958a6080_JaffaCakes118
Size

184KB
MD5

aa860c782e5fe4cf4fed0d1c958a6080
SHA1

717300f0f03effa7bfb34a05a2665fabadd24c54
SHA256

484e829bd8f41e5f53266e6e83725fffaa6fc24ab5b498d290aac994c785db1f
SHA512

bb3a2cc6c9edfc6743c87a405e53ef884803e72e497a43852015e9e928237d5f2eea8434c5c40ddaf8472511a9fcbd9e2f83169426727959ddb6fbea91299bab
SSDEEP

3072:urZLVHaDqBSWknz5ibbDpNroWgae3Lmw+MIFp0TiMng+VMZTQ7yAcI71r:uFLBaBWkibdNroWMKlQ+wg+VzkIB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa860c782e5fe4cf4fed0d1c958a6080_JaffaCakes118

Files

aa860c782e5fe4cf4fed0d1c958a6080_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca758f6770e8cc2b86038222ef0f87f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
LocalAlloc
RtlCaptureContext
RtlCaptureStackBackTrace
RtlFillMemory
RtlMoveMemory
RtlUnwind
lstrcpyA
VerSetConditionMask
SetTimeZoneInformation
CloseHandle
RtlZeroMemory

ntdll

RtlEqualLuid

user32

ClientToScreen

ole32

SNB_UserFree
CoFreeAllLibraries

advapi32

ComputeAccessTokenFromCodeAuthzLevel
RegCreateKeyA

gdi32

SetStretchBltMode
PaintRgn
MaskBlt
IntersectClipRect
GetTextCharacterExtra
GetStretchBltMode
SetTextCharacterExtra
GetBkColor
GdiSetBatchLimit
ExtSelectClipRgn
EqualRgn
EnumObjects
EnumFontsA
CreateSolidBrush
CreateEllipticRgn
UpdateColors
GetClipRgn
Chord
CreateBitmap

shell32

SHFlushSFCache
SHCreatePropSheetExtArray

appmgmts

ReleaseAppCategoryInfoList

Exports

Exports

B5ew9vUNN2PjPX
JjmQg9kvfC0yQe3PxNa
e1LCc

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca758f6770e8cc2b86038222ef0f87f1

Headers

File Characteristics

Imports

kernel32

ntdll

user32

ole32

advapi32

gdi32

shell32

appmgmts

Exports

Exports

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 1024B - Virtual size: 768B

.data Size: 50KB - Virtual size: 337KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 1024B - Virtual size: 768B

.data
Size: 50KB - Virtual size: 337KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 1KB