b732247a48425f9b068d991183fd456b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b732247a48425f9b068d991183fd456b_JaffaCakes118
Size

241KB
MD5

b732247a48425f9b068d991183fd456b
SHA1

a3310ad3c715aa5c3a086be428050942f2aabc29
SHA256

851a0b9ea195791565858fdbad908f98704531c0872530ef33abd66be1340449
SHA512

68508df745a26b10fdc33054574d49bc58db11eb6bf199786a1c3710fd634b8958a2983a9150b89c6b5f4213c2aef93c44629f271195056537b9d0af24351279
SSDEEP

3072:PBAVjgZfYnv/L0ILv4MukegblqRLYCfQOefWFpaDh4c7+ZSquw+KmQIsd50JxYLs:ZAOZwvjdvzMkWp0h4c7sju7ds7YY654S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b732247a48425f9b068d991183fd456b_JaffaCakes118

Files

b732247a48425f9b068d991183fd456b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47fd1d26ee1d4049d00b8f4a26d37496

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey

kernel32

ConvertThreadToFiber
CreateFiber
ExitProcess
SetUnhandledExceptionFilter
TerminateThread

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
signal
strcpy
wcscpy

user32

BringWindowToTop
CheckMenuRadioItem
CloseClipboard
CopyRect
CreateAcceleratorTableW
CreateIconIndirect
DestroyIcon
DestroyMenu
DestroyWindow
DrawMenuBar
EmptyClipboard
EndDeferWindowPos
EndPaint
EnumDisplaySettingsW
GetAsyncKeyState
GetDC
GetFocus
GetParent
GetSysColor
GetSystemMenu
GetWindowTextLengthW
IsDialogMessageW
IsWindowVisible
LoadCursorW
LoadIconW
MapWindowPoints
MessageBoxW
MsgWaitForMultipleObjects
OpenClipboard
PostMessageW
PostQuitMessage
RegisterClassW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetScrollInfo
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
UnionRect
UpdateWindow

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 155KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47fd1d26ee1d4049d00b8f4a26d37496

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 104B

.idata Size: 2KB - Virtual size: 2KB

.rdata Size: 1024B - Virtual size: 608B

.bss Size: - Virtual size: 155KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 104B

.idata
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1024B - Virtual size: 608B

.bss
Size: - Virtual size: 155KB

.rsrc
Size: 25KB - Virtual size: 25KB