b6d5fd87d11c5a722138f6e98fb44cd6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b6d5fd87d11c5a722138f6e98fb44cd6_JaffaCakes118
Size

111KB
MD5

b6d5fd87d11c5a722138f6e98fb44cd6
SHA1

e534344d30c057a68d99c5356279f0967cd5dc1e
SHA256

a0f49e56c61c6db976972c795e20e8da5a1b72b70e7db4b393725abf71b72b26
SHA512

70dcae882c2ce3de17b757245e1ffe3db16902aede6cac96d09c3a998aa143bacce0d65689ce1624f1580a6bbc99a0912400470964f5347fa1e2e008c639b820
SSDEEP

3072:JsZsN2CEAkh4AxQjUgLrpNfSVQakfQbRqXl:he4AS8eHE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6d5fd87d11c5a722138f6e98fb44cd6_JaffaCakes118

Files

b6d5fd87d11c5a722138f6e98fb44cd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bf8dad16d274eb764c62342b6f63eda

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

ShellAboutW

kernel32

lstrcatW
WriteProfileStringW
GlobalUnlock
GlobalLock
GlobalSize
lstrcmpW
GlobalFree
GlobalAlloc
GlobalReAlloc
GlobalCompact
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
lstrlenW
Sleep
LocalFree
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetProcAddress
RaiseException
LCMapStringA
LCMapStringW
HeapFree
HeapAlloc
VirtualAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
LocalReAlloc
GetProfileStringW
LocalAlloc
GetTickCount
lstrcpyW
GetProfileIntW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

gdi32

SetBkColor
SelectObject
SetTextColor
DeleteObject
GetTextExtentPointW
TextOutW
SetBkMode
GetTextMetricsW
GetDeviceCaps
GetStockObject

user32

GetSysColor
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
IsDialogMessageW
LoadAcceleratorsW
SendMessageW
CreateWindowExW
UpdateWindow
ShowWindow
CheckRadioButton
ReleaseDC
GetDC
GetWindowRect
CreateDialogParamW
MessageBoxW
LoadStringW
RegisterClassExW
GetSysColorBrush
LoadCursorW
LoadIconW
SetDlgItemTextW
GetDlgItem
FillRect
SetRect
CheckMenuItem
GetSubMenu
GetMenu
SetWindowPos
MapDialogRect
InvalidateRect
SetFocus
IsIconic
GetMessageW
MessageBeep
CharUpperW
DrawFrameControl
GetClientRect
ShowCursor
SetCursor
EndPaint
DrawEdge
BeginPaint
EnableWindow
WinHelpW
CloseClipboard
GetClipboardData
OpenClipboard
SetWindowTextW
DestroyMenu
TrackPopupMenuEx
LoadMenuW
ReleaseCapture
SetCapture
GetDlgCtrlID
EnableMenuItem
IsClipboardFormatAvailable
ScreenToClient
DestroyWindow
PostQuitMessage
DefWindowProcW
CheckDlgButton
SetDlgItemTextA
GetWindowTextW
wsprintfW

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kwmuuqx
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5bf8dad16d274eb764c62342b6f63eda

Headers

File Characteristics

Imports

shell32

kernel32

gdi32

user32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 7KB - Virtual size: 8KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 38KB - Virtual size: 39KB

kwmuuqx Size: - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 7KB - Virtual size: 8KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 38KB - Virtual size: 39KB

kwmuuqx
Size: - Virtual size: 4KB