ad5464e3fb8f5dddac5dc02561957c52_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ad5464e3fb8f5dddac5dc02561957c52_JaffaCakes118
Size

109KB
MD5

ad5464e3fb8f5dddac5dc02561957c52
SHA1

03c59e6d9b39025bd559223db6c701adabf68502
SHA256

80367fc91b46e76f0ac63efe8fe9425f25a80d21fe1ae2fee91dd80ddedc931f
SHA512

3ec8dd12fe5ad65c23217fa149695ca6af137d8c2346bacf33afdf73408b9fd17625e5db64adec8b7fbc18cfa36139b96b15eeac5bafbc1cc97e2a41aa91a178
SSDEEP

3072:Mf2sgVxzgtYMgkwnmJQcY5vA0RDq3F3gJyiNX/v:Mf2D8zK0fYlATF3g8GX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad5464e3fb8f5dddac5dc02561957c52_JaffaCakes118

Files

ad5464e3fb8f5dddac5dc02561957c52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b742b4a12037dfcea79b0a837cd7ab3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA

advapi32

RegEnumValueA
RegDeleteValueA

user32

LoadStringA
SendMessageA
MessageBoxA
OpenClipboard
PeekMessageW
RegisterClipboardFormatA
PostQuitMessage
SetActiveWindow
PeekMessageA
RemovePropA
RedrawWindow
ReleaseCapture
MapWindowPoints
RemoveMenu
LoadIconA
RegisterWindowMessageA
PostMessageA
PtInRect
MapVirtualKeyA
OemToCharA
OffsetRect
SendMessageW
LoadCursorA
ScrollWindow
LoadBitmapA
ReleaseDC
LoadKeyboardLayoutA
ScreenToClient
MessageBeep
RegisterClassA

gdi32

SetBkColor
GetObjectA
SetBkMode
SetTextColor
SaveDC
SelectPalette
CreateDIBitmap
GetDCOrgEx
CreatePenIndirect
RestoreDC

kernel32

LoadLibraryExA
GlobalDeleteAtom
GetDiskFreeSpaceA
SetEndOfFile
GetCurrentThreadId
FindResourceA
GetFullPathNameA
LoadLibraryA
GetProcessHeap
GetModuleHandleA
WideCharToMultiByte
ResetEvent
GetModuleHandleW
LockResource
lstrcmpA
lstrlenA
GetVersionExA
ExitProcess
SetErrorMode
lstrcatA
GetLocaleInfoA
ReadFile
GetStringTypeW
GlobalFindAtomA
GetACP
Sleep
EnumCalendarInfoA
IsBadHugeReadPtr
FindClose
GetUserDefaultLCID
GetCommandLineA
GetModuleFileNameA
SetEvent
lstrlenW
GetFileType
GetFileSize
MulDiv
GetLastError
GetDateFormatA
lstrcpyA
HeapAlloc
RaiseException
GetProcAddress
GetCPInfo
CloseHandle
ExitThread
GetSystemDefaultLangID
LocalAlloc
SetThreadLocale
CreateEventA
SetFilePointer
SizeofResource
DeleteFileA
GetCurrentProcessId
lstrcmpiA
IsBadReadPtr
GetCommandLineW
HeapDestroy
GlobalAddAtomA
VirtualAllocEx
WriteFile

msvcrt

cos
clock

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 883B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b742b4a12037dfcea79b0a837cd7ab3

Headers

File Characteristics

Imports

version

advapi32

user32

gdi32

kernel32

msvcrt

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 46KB - Virtual size: 45KB

.data Size: 8KB - Virtual size: 8KB

.gdata Size: 1024B - Virtual size: 883B

DATA Size: 8KB - Virtual size: 8KB

.adata Size: 512B - Virtual size: 306B

.rsrc Size: 1024B - Virtual size: 864B

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 46KB - Virtual size: 45KB

.data
Size: 8KB - Virtual size: 8KB

.gdata
Size: 1024B - Virtual size: 883B

DATA
Size: 8KB - Virtual size: 8KB

.adata
Size: 512B - Virtual size: 306B

.rsrc
Size: 1024B - Virtual size: 864B