b7933504656433518ff3e6e35510808c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b7933504656433518ff3e6e35510808c_JaffaCakes118
Size

246KB
MD5

b7933504656433518ff3e6e35510808c
SHA1

a626e733f343820e2b3a3b09eb220f877a90e8af
SHA256

d02220a4cc53ddfc9be35b87913c30a21d85cd8b4bcf93273577ac68d0e5e79f
SHA512

dc1706c496b0c1a72ad6609a42ddb3f16438697a68089ae92ba016753912821c2e089850e7c8cfaab825f3d77e9a5562a0374f091cede4ebac914918db4d941b
SSDEEP

6144:YC7GgUxrLYPTLM8/DtMbh7ZbPZgnRDNIN4gYQA:LiLYPg1ZbPZ62tA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7933504656433518ff3e6e35510808c_JaffaCakes118

Files

b7933504656433518ff3e6e35510808c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e2bce302c75471daf5a280ae1e1fe35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA
GetFileVersionInfoA
GetFileVersionInfoSizeA

user32

DrawFrameControl
SetPropA
DrawAnimatedRects
GetMenuItemInfoA
IsCharLowerA
MoveWindow
GetDC
LoadKeyboardLayoutA
ActivateKeyboardLayout
DrawTextA
GetSystemMenu
IsMenu
DispatchMessageW
SetWindowPos
IsChild
WaitMessage
DefMDIChildProcA
ShowOwnedPopups
GetScrollRange
DefFrameProcA
GetWindowTextLengthA
ClientToScreen
ScreenToClient
GetClassLongA
IsDialogMessageW
GetWindowThreadProcessId
UnregisterClassA
GetWindowDC
DefWindowProcA
GetClientRect
EnableScrollBar
TranslateMessage
GetClipboardData
GetClassNameA
GetDCEx
IntersectRect
GetMenu
RegisterClassA
CharLowerA
SetCursor
IsDialogMessageA
MessageBoxA
GetTopWindow
ShowWindow
GetSysColorBrush
RemoveMenu
IsCharUpperA
SetWindowLongA
GetKeyboardLayout
GetClassInfoA
PeekMessageA
RegisterClipboardFormatA
MsgWaitForMultipleObjects
CreatePopupMenu
ScrollWindow
DestroyWindow
SetCapture
GetWindowTextA
CharUpperBuffA
DrawIcon
IsDlgButtonChecked
IsZoomed

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
SHGetFolderPathA
SHGetDesktopFolder

kernel32

GetOEMCP
VirtualAllocEx
SetHandleCount
GetFileAttributesA
FindResourceA
DeleteCriticalSection
LockResource
ReadFile
lstrcmpA
MoveFileExA
GetModuleFileNameA
CloseHandle
LoadLibraryA
lstrcpynA
GetSystemDefaultLangID
GetProcAddress
GetUserDefaultLCID
GetStdHandle
GetStartupInfoA
GetProcessHeap
ExitProcess
GlobalFindAtomA

Exports

Exports

ZvQsOoC2hIrY

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 512B - Virtual size: 497B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e2bce302c75471daf5a280ae1e1fe35

Headers

File Characteristics

Imports

version

user32

shell32

kernel32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 198KB - Virtual size: 198KB

.edata Size: 4KB - Virtual size: 4KB

.badata Size: 512B - Virtual size: 497B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 198KB - Virtual size: 198KB

.edata
Size: 4KB - Virtual size: 4KB

.badata
Size: 512B - Virtual size: 497B

.rsrc
Size: 8KB - Virtual size: 8KB