b7932c75c510b6f5bf91861a33b1a6fc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b7932c75c510b6f5bf91861a33b1a6fc_JaffaCakes118
Size

494KB
MD5

b7932c75c510b6f5bf91861a33b1a6fc
SHA1

1667d34bfa493e7f2514dd4ad188ada2182bc3a7
SHA256

211c152853c777b2123d453b5100edc3ccf0199347429965f6705696801312b6
SHA512

b3a5a48385a8ff973be425b65a5c7c1eddda4c89a342d0b677387939c51ac874e957a70706e5a6487a364d13e245ef4a34baa58895d30772dc8a27bdad68dd99
SSDEEP

12288:d9IsUvHQsRZ8RD2G5QDPFh+fNR3Hzqik+HvJd:d9IsUvHrPqDZKD21RDqTKJd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7932c75c510b6f5bf91861a33b1a6fc_JaffaCakes118

Files

b7932c75c510b6f5bf91861a33b1a6fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c7411dd0983c8807810dcacfeec7895

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassA
ExitWindowsEx
DragDetect
ShowWindow
RegisterClassExA
MessageBoxA
CreateWindowExA

kernel32

GetStartupInfoA
GetEnvironmentStringsW
CompareStringW
FindFirstFileW
RtlUnwind
Sleep
GetTimeZoneInformation
GetTimeFormatA
WriteFile
DebugActiveProcess
GetCommandLineA
InitializeCriticalSection
GetConsoleMode
GetVersion
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
ExitProcess
MultiByteToWideChar
GetConsoleCP
SetUnhandledExceptionFilter
GetDateFormatA
IsValidLocale
GetLastError
GetCPInfo
HeapDestroy
CreateFileA
WideCharToMultiByte
GetModuleFileNameW
GetLocaleInfoA
InterlockedExchange
SetLastError
DeleteCriticalSection
GetOEMCP
VirtualQuery
GetVersionExA
GetProcAddress
LCMapStringW
HeapReAlloc
InterlockedDecrement
TlsGetValue
IsDebuggerPresent
SetFilePointer
FreeLibrary
SetEnvironmentVariableA
CompareStringA
WriteConsoleW
TlsAlloc
GetStringTypeW
GetACP
GetLocaleInfoW
HeapSize
WritePrivateProfileStringA
SetHandleCount
LCMapStringA
UnhandledExceptionFilter
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
InterlockedIncrement
TlsFree
GetStartupInfoW
GetTickCount
CreateMutexA
QueryPerformanceCounter
FreeEnvironmentStringsW
TerminateProcess
OpenMutexA
GetStringTypeA
CloseHandle
GetStdHandle
HeapCreate
WriteConsoleA
GetCommandLineW
SetStdHandle
SetConsoleCtrlHandler
GetProcAddress
GetCurrentThread
EnumSystemLocalesA
GetConsoleOutputCP
GetProcessHeap
GetEnvironmentStrings
FlushFileBuffers
VirtualFree
HeapAlloc
IsValidCodePage
ReadFile
HeapValidate
GetFileType
FreeEnvironmentStringsA
HeapFree
EnterCriticalSection
GetCurrentProcess
GetUserDefaultLCID
LoadLibraryA
TlsSetValue
GetCurrentThreadId

comctl32

InitCommonControlsEx

gdi32

SetTextAlign
GetDeviceCaps
DescribePixelFormat
GetCurrentPositionEx
SetPolyFillMode
CreateDCW
CloseFigure
GetWorldTransform
SetWindowOrgEx
GetTextExtentPointA
ExtEscape
BeginPath
TextOutA
DeleteDC

Sections

.text
Size: 315KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c7411dd0983c8807810dcacfeec7895

Headers

File Characteristics

Imports

user32

kernel32

comctl32

gdi32

Sections

.text Size: 315KB - Virtual size: 314KB

.rdata Size: 61KB - Virtual size: 70KB

.data Size: 107KB - Virtual size: 107KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 315KB - Virtual size: 314KB

.rdata
Size: 61KB - Virtual size: 70KB

.data
Size: 107KB - Virtual size: 107KB

.rsrc
Size: 9KB - Virtual size: 9KB