bb21564218c9e8cdec17d367d888cbb6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bb21564218c9e8cdec17d367d888cbb6_JaffaCakes118
Size

322KB
MD5

bb21564218c9e8cdec17d367d888cbb6
SHA1

5226747b2d932ff9f4fc3a920cbddb1bbd892f5d
SHA256

5a6330194dec99c67f43e0fd724b5350ec6931f1105f4c96680e5f1812970d2b
SHA512

340f1ae0502ea0dbae54f52ccdb3b00ab81accb2625189f0686b827281be814717bc1469fd3ba77494fd7b65c20ea660792fd5c5f691123161799422ff3a83af
SSDEEP

3072:Et5m53tA5fnlxViYNs0TDMGunJ0OjDj0VW2hYtwUif99ZC47VUhRGL/QIDENnjRq:ES59AVnl3/sv5JHJ6UUO47VUhR0wn2nj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb21564218c9e8cdec17d367d888cbb6_JaffaCakes118

Files

bb21564218c9e8cdec17d367d888cbb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7972cc5461b86c4ed5467315d1fbab6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

GetRegionData

kernel32

AddAtomA
Beep
CreateFileA
CreatePipe
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal
strcmp
tan

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
FindWindowA
GetMessageA
GetPropA
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage

ole32

BindMoniker
CoCreateGuid

ws2_32

getpeername
gethostbyname

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 544B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dighqeh
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qtiegxf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lvfcewe
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f7972cc5461b86c4ed5467315d1fbab6

Headers

File Characteristics

Imports

gdi32

kernel32

msvcrt

user32

ole32

ws2_32

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 2KB - Virtual size: 2KB

.rdata Size: 301KB - Virtual size: 300KB

.bss Size: - Virtual size: 544B

.idata Size: 2KB - Virtual size: 1KB

dighqeh Size: 4KB - Virtual size: 4KB

qtiegxf Size: 512B - Virtual size: 4KB

lvfcewe Size: 512B - Virtual size: 4KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 2KB - Virtual size: 2KB

.rdata
Size: 301KB - Virtual size: 300KB

.bss
Size: - Virtual size: 544B

.idata
Size: 2KB - Virtual size: 1KB

dighqeh
Size: 4KB - Virtual size: 4KB

qtiegxf
Size: 512B - Virtual size: 4KB

lvfcewe
Size: 512B - Virtual size: 4KB