b7a2cc5ae817426de5369c68ae9904fb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b7a2cc5ae817426de5369c68ae9904fb_JaffaCakes118
Size

763KB
MD5

b7a2cc5ae817426de5369c68ae9904fb
SHA1

0f1cb1d0856292c2a242b2b2f4c5f8f7069674c0
SHA256

ce5e4525cff59e46021c73be5e45f899e93eab9cd4228db4ab593930427753ad
SHA512

130181de005006d07e8eaa8ea700b825d2dbc06b1f5e2e762f830413dc900fe37d7a3d2b99f098995d6f70a4101c228de66048584ec9d418c30a0c0698b3c0d0
SSDEEP

12288:wEmBlUxroJ4jt0raYftnCVOtbPoUYFwa25O18VN37ifptF7joLD6ZSWsxkUS6:wEmcV7t0r7tnCVgbwUY6z3b7wpkDJWsV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7a2cc5ae817426de5369c68ae9904fb_JaffaCakes118

Files

b7a2cc5ae817426de5369c68ae9904fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f5b4a6b792515ef59c14d7d01cb642e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType
MessageBoxA

kernel32

GetACP
GetModuleHandleA
GetProcAddress
VirtualProtect

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

winmm

timeGetTime

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 56B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 730KB - Virtual size: 729KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f5b4a6b792515ef59c14d7d01cb642e

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

winmm

Sections

.text Size: - Virtual size: 1.0MB

.itext Size: - Virtual size: 4KB

.data Size: - Virtual size: 17KB

.bss Size: - Virtual size: 24KB

.idata Size: - Virtual size: 12KB

.tls Size: - Virtual size: 56B

.rdata Size: 512B - Virtual size: 24B

.vmp0 Size: - Virtual size: 59KB

.rsrc Size: 31KB - Virtual size: 329KB

.vmp1 Size: - Virtual size: 60KB

.vmp2 Size: 730KB - Virtual size: 729KB

.reloc Size: 512B - Virtual size: 140B

.text
Size: - Virtual size: 1.0MB

.itext
Size: - Virtual size: 4KB

.data
Size: - Virtual size: 17KB

.bss
Size: - Virtual size: 24KB

.idata
Size: - Virtual size: 12KB

.tls
Size: - Virtual size: 56B

.rdata
Size: 512B - Virtual size: 24B

.vmp0
Size: - Virtual size: 59KB

.rsrc
Size: 31KB - Virtual size: 329KB

.vmp1
Size: - Virtual size: 60KB

.vmp2
Size: 730KB - Virtual size: 729KB

.reloc
Size: 512B - Virtual size: 140B