bd75159b6800e83d1766f8113a7e0bc0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bd75159b6800e83d1766f8113a7e0bc0_JaffaCakes118
Size

569KB
MD5

bd75159b6800e83d1766f8113a7e0bc0
SHA1

edd60f104026bd0747c3dd2fea8bec205f20c94e
SHA256

81dbd2807b7780b7b1f2a1817ebc3c2b56ded5fa99328f6d6461d4750c427d79
SHA512

65bd5c56931d8be3ee3f6a57eb7d6833f7ac00cb6a3cc565aeec756faf42e0821dd00ad79413202dc912af089d2faead95228d3b111199b5cab84b00e87d72b7
SSDEEP

12288:sRoJU7jtaOAnO7S816/r1wlRaOyDqAjHjLhoLp0yTXEQZVJsUFGx:sRoJU3gOAO7SbD40FDLDLiGyzXXWUM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd75159b6800e83d1766f8113a7e0bc0_JaffaCakes118

Files

bd75159b6800e83d1766f8113a7e0bc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97fd792bdd50a2170770e77e62b2b402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetStartupInfoA
SetEnvironmentVariableA
GetEnvironmentVariableA
ReleaseMutex
GetCommandLineA
Sleep
WaitForSingleObject
CreateMutexA
OpenMutexA
GetCurrentProcessId
CreateThread
CloseHandle
ReadFile
GetFileSize
CreateFileA
FindClose
FindFirstFileA
GetCurrentThreadId
GetExitCodeProcess
ContinueDebugEvent
ReadProcessMemory
WaitForDebugEvent
SuspendThread
DebugActiveProcess
ResumeThread
VirtualProtectEx
WriteProcessMemory
GetThreadContext
GetModuleFileNameA
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
HeapReAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CreateProcessA
GetCurrentThread
SetThreadPriority
GetVersionExA
LoadLibraryA
GetLastError
GetProcAddress
VirtualAlloc
VirtualProtect
GetModuleHandleA
RtlUnwind
GetVersion
ExitProcess
HeapFree
HeapAlloc

user32

WaitForInputIdle
PostThreadMessageA
GetMessageA
IsWindow
PeekMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
KillTimer
LoadCursorA
RegisterClassA
GetAsyncKeyState
GetSystemMetrics
CreateWindowExA
SetTimer
PostMessageA
MessageBoxA
SetWindowTextA
GetDlgItem
CreateDialogIndirectParamA
ShowWindow
UpdateWindow
FindWindowA
SendMessageA
DestroyWindow
DefWindowProcA

gdi32

SelectObject
BitBlt
DeleteObject
CreatePalette
CreateDCA
SelectPalette
RealizePalette
CreateDIBitmap
DeleteDC
CreateCompatibleDC

Sections

.text
Size: - Virtual size: 446KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text1
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 364KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97fd792bdd50a2170770e77e62b2b402

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: - Virtual size: 446KB

.itext Size: - Virtual size: 1KB

.data Size: - Virtual size: 22KB

.bss Size: - Virtual size: 18KB

.idata Size: - Virtual size: 11KB

.tls Size: - Virtual size: 52B

.rdata Size: 4KB - Virtual size: 24B

.reloc Size: - Virtual size: 27KB

.rsrc Size: 28KB - Virtual size: 27KB

.text1 Size: 52KB - Virtual size: 49KB

.rdata1 Size: 4KB - Virtual size: 3KB

.data1 Size: 16KB - Virtual size: 18KB

.reloc1 Size: 4KB - Virtual size: 3KB

.pdata Size: 364KB - Virtual size: 360KB

.text
Size: - Virtual size: 446KB

.itext
Size: - Virtual size: 1KB

.data
Size: - Virtual size: 22KB

.bss
Size: - Virtual size: 18KB

.idata
Size: - Virtual size: 11KB

.tls
Size: - Virtual size: 52B

.rdata
Size: 4KB - Virtual size: 24B

.reloc
Size: - Virtual size: 27KB

.rsrc
Size: 28KB - Virtual size: 27KB

.text1
Size: 52KB - Virtual size: 49KB

.rdata1
Size: 4KB - Virtual size: 3KB

.data1
Size: 16KB - Virtual size: 18KB

.reloc1
Size: 4KB - Virtual size: 3KB

.pdata
Size: 364KB - Virtual size: 360KB