b5c6a0980b276a7e9ec18af3f65889ed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b5c6a0980b276a7e9ec18af3f65889ed_JaffaCakes118
Size

608KB
MD5

b5c6a0980b276a7e9ec18af3f65889ed
SHA1

22ce9293b488a4fe0c642e0409cbd58191ddd8a7
SHA256

8b288e11154ec99f43e07ad5ba92821b78fcf233eae1083c96b351edd5a0433c
SHA512

e50bfb182b627fb852cc59ab337443b83cdb48929ea25b7f8c73ae0ba2469cd1d8b7dc29e113b641c8d656dba7ea0633669f708b4804c5ffc01873b8c1aa4591
SSDEEP

3072:fhhhvCC1MCViqodYDilCWv9w19hmx/SCky7aL/2g:9IBcDiUWv9G7mx/SZTP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5c6a0980b276a7e9ec18af3f65889ed_JaffaCakes118

Files

b5c6a0980b276a7e9ec18af3f65889ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2f26ff31355b25803280537c9c6accd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetModuleFileNameA
WinExec
lstrcpynA
CreateProcessA
lstrcpyA
lstrlenA
Sleep
LoadLibraryA
GetVersion
GetCommandLineA
CloseHandle
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
GetLastError
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetProcAddress
FreeLibrary
ExitProcess
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetModuleHandleA
GetStartupInfoA
UnhandledExceptionFilter
HeapSize
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess

user32

EnableMenuItem
CheckMenuItem
InsertMenuA
CreateMenu
AppendMenuA
LoadStringA
DestroyMenu
DeleteMenu
GetMenuItemCount
KillTimer
SetTimer
DestroyIcon
LoadMenuA
SendMessageA
PostQuitMessage
DefWindowProcA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PostMessageA
FindWindowA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
DispatchMessageA
TranslateMessage
MessageBoxA
GetSubMenu

gdi32

GetStockObject

advapi32

RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
CloseServiceHandle
OpenSCManagerA
RegCloseKey

shell32

Shell_NotifyIconA

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nrdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b2f26ff31355b25803280537c9c6accd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 12KB - Virtual size: 12KB

.nrdata Size: 80KB - Virtual size: 80KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 12KB - Virtual size: 12KB

.nrdata
Size: 80KB - Virtual size: 80KB