b43459cb05d8e4b4a5b9736e5eb83e39_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b43459cb05d8e4b4a5b9736e5eb83e39_JaffaCakes118
Size

2.6MB
MD5

b43459cb05d8e4b4a5b9736e5eb83e39
SHA1

3043046679fe6ad8c7ad00c05716fbd7bd416fa3
SHA256

97002092f611b81efc827acd5fcbd5021f5c9b6edc755a0202e2dff7cef4376a
SHA512

b0036374d5e950688b1ca7c592268b0b9f58e35b1f677a6ad5ae765b75853819466105f424fdca65ff88fa1874869e602e27d2390660181784bc2c2a9d7825df
SSDEEP

49152:ONHTBnYgl4eKL0P/kfrk8n0Rky+U6LOAR4sTDSNv1uXmEdLXehpi5qOFhWd2qU6:2+glepoYCH6DDSNv2ddrehpd2qU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b43459cb05d8e4b4a5b9736e5eb83e39_JaffaCakes118

Files

b43459cb05d8e4b4a5b9736e5eb83e39_JaffaCakes118
.exe windows:5 windows x86 arch:x86

01e6b6459d52952078a9ab8a5be44793

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SendDlgItemMessageA

gdi32

MoveToEx

msimg32

AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW

advapi32

RegQueryValueW

shell32

DragQueryFileW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsW

ws2_32

WSAAddressToStringA

oledlg

OleUIBusyW

ole32

CLSIDFromString

oleaut32

VariantTimeToSystemTime

gdiplus

GdipCloneImage

iphlpapi

GetAdaptersInfo

winmm

PlaySoundW

wininet

HttpSendRequestW

dbghelp

MiniDumpWriteDump

version

GetFileVersionInfoSizeW

imm32

ImmGetContext

Sections

.text
Size: 2.6MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

01e6b6459d52952078a9ab8a5be44793

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ws2_32

oledlg

ole32

oleaut32

gdiplus

iphlpapi

winmm

wininet

dbghelp

version

imm32

Sections

.text Size: 2.6MB - Virtual size: 7.0MB

.rsrc Size: 28KB - Virtual size: 28KB

.reloc Size: 1024B - Virtual size: 856B

.text
Size: 2.6MB - Virtual size: 7.0MB

.rsrc
Size: 28KB - Virtual size: 28KB

.reloc
Size: 1024B - Virtual size: 856B