b27f4737b7d4293b8ca0ab59d6ea2098_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b27f4737b7d4293b8ca0ab59d6ea2098_JaffaCakes118
Size

77KB
MD5

b27f4737b7d4293b8ca0ab59d6ea2098
SHA1

87f2c877d66ae1108152175521368b5ab1cadc3e
SHA256

96f27f4f2b24c708b06a25c7cab612f02162e20990591c9db1acafb8e773eb4c
SHA512

296bc5763c6a5f575e0c9bf56868cee58bd611916ebe1602963add1f2961fd0fdad0c9f26200235fc52f7d153edfddbb316db52d07aaaa8353739feeec8448e5
SSDEEP

1536:AiQgzHtbMeQi4C9bnWe7z9EQ3G2e7JqSbk4p:lQgzHuCNhWSGXVqz4p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b27f4737b7d4293b8ca0ab59d6ea2098_JaffaCakes118

Files

b27f4737b7d4293b8ca0ab59d6ea2098_JaffaCakes118
.exe windows:4 windows x86 arch:x86

825db8cf3c6878320f1d311d1308f717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCapture
FrameRect
GetActiveWindow
GetClassInfoA
GetMenu

kernel32

lstrcmpA
lstrcatA
GetCurrentThreadId
FormatMessageA
GlobalDeleteAtom
GetCommandLineA
GetThreadLocale
FreeResource
HeapFree
GetCurrentProcessId
SetThreadLocale
HeapDestroy
WriteFile
GetEnvironmentStrings
Sleep
GetSystemDefaultLangID
GlobalAlloc
MoveFileExA
IsBadReadPtr
GetCPInfo
GetStringTypeA
GetFileSize
GetDateFormatA
lstrcpynA
SetFilePointer
GetModuleHandleA
GetACP
HeapAlloc
ExitProcess
LockResource
GetModuleFileNameA
GetFullPathNameA
LocalAlloc
GetStringTypeW
DeleteFileA
SetErrorMode
ExitThread
IsBadHugeReadPtr
WideCharToMultiByte
FindFirstFileA
GetUserDefaultLCID
GetVersionExA
InitializeCriticalSection
FindResourceA
LoadLibraryA
GetCurrentProcess
lstrlenA
DeleteCriticalSection
GetOEMCP
MoveFileA
CreateEventA
GetCommandLineW
VirtualAllocEx
GetLastError
SetHandleCount

comctl32

ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Add

gdi32

SetPixel
CopyEnhMetaFileA
CreateDIBitmap
SetBkColor

Exports

Exports

g0Oaj
_z5GeDLM@20
erEFDy
zwMSPbqRRTUNo
_sjKoqk_5pxln5@4
_ZQadjDUaug
lFe5j8wORwk@4
pmLPa@16
_NL0O_Vv@12
6y5i_Rs@8
_0_Qz4Bnq6pVDni@12
_aLlzzt_B@4
qdrbZ@4
_tlZ61Ed5@20
_2wVLeetDs
_iHoN1
eiQyF@24
vGbDutBN5vA
uDfCr_qKV@8
6DcG_R@4
_uAwjE9H@8
_Ozqlygf@8
_KMJ9w7cu
_c7N327FoK4m@24
QWd5RYQ
_DQ_4JzTNaEp6V
A5KsPNpR6AuR
AYvAre0@20
_HqdPVMFW6jKkk
_Og95dtr1HEi
_VlRBFY9o8HflR6
_WJ6r6PW
_4zwMjl8ZLq5q
_6w3juKVQ
_Kjaxc6w4w@20
_BqREHTkE84ZeN6@24
1wUbW@20
qJF0D6YnV9
_LmYYoc1G
BgBdtud@24
_8MNgEX
P4XjqYj0ZC@16
38_bt
l9xLjnC2qEmMfw
IoIOSx9xHkE5
_Fspaa5aVexX6F@16
PHhtt7OlknkzWK@16
_zOOxKL
HVdV4ineJqC1
tD0Tx3@24
_enGbgZ3VHa@20
f6ob1u7S
tTBZL0HO@24
PpXtVKCqEWywoR
wIc7T3rrfNrmgA
_pr1JXszF3yYNsF
_LMTyAfZR@20
_iFTcsP@16
AhLorke@12
_aUwfJvIuSD@16
0nlUFdTq@24
_JQJ0wiO2TLs_6@20
___JuamE
_75xXuw1xZS@24
9l0KCzaiXd@24
fEx95FDwg89J

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 10KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kldata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

825db8cf3c6878320f1d311d1308f717

Headers

File Characteristics

Imports

user32

kernel32

comctl32

gdi32

Exports

Exports

Sections

CODE Size: 12KB - Virtual size: 12KB

.DATA Size: 10KB - Virtual size: 30KB

.kldata Size: 48KB - Virtual size: 47KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 12KB - Virtual size: 12KB

.DATA
Size: 10KB - Virtual size: 30KB

.kldata
Size: 48KB - Virtual size: 47KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB