bd1a82170656b5c6dabea3611beab8ae_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bd1a82170656b5c6dabea3611beab8ae_JaffaCakes118
Size

151KB
MD5

bd1a82170656b5c6dabea3611beab8ae
SHA1

a0ca42226a698131fec479860b7bc318bbd64650
SHA256

48031fe1ca72eb298fb7056add156879ef2fc520a34bfbebe4685164c872a483
SHA512

ab755db6c9bf9c4376df6134c918db4bfd4c356138fffa0867c600715e6ba9cb353dca83668a747fe508b3c24e4c264a8fa8c3a3d4b9a6ad264e8d599f00e6e0
SSDEEP

3072:6HPvcNOyaJXG8i8MysaXCd+eELP+Gnz+7harnj3LQ51pZlcmBWIB+Zekn7:6v49aJXiHydsre2GnzsarbLS/zcA+Ze0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd1a82170656b5c6dabea3611beab8ae_JaffaCakes118

Files

bd1a82170656b5c6dabea3611beab8ae_JaffaCakes118
.exe windows:25419 windows x86 arch:x86

efdc40f4287af211bb01a19e48a5260c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
LoadStringA
LoadMenuW
KillTimer
InvalidateRect
LoadCursorW
CreateDialogParamW
DestroyWindow
SetTimer
GetDlgItemTextW
EnableMenuItem
MoveWindow
PtInRect
CharNextW
GetDlgItem
EnableMenuItem
IsDialogMessageW
SendDlgItemMessageW
SetTimer
SetWindowPos
SetCapture
GetMenu
DefWindowProcW
EnableMenuItem
GetWindowLongW
SetDlgItemTextW
LoadStringW
ReleaseDC
GetMessageW
GetDlgItemTextW
GetSystemMenu
GetDlgItem
OffsetRect

gdi32

CreateCompatibleDC
StretchBlt
GetTextMetricsW
GetDeviceCaps
SetBkColor
GetTextMetricsW
GetTextExtentPoint32W
CreateCompatibleDC
DeleteObject
LineTo
StretchBlt
SetBkMode
SetBkColor
SetBkMode
CreateSolidBrush
GetTextExtentPoint32W
MoveToEx
GetDeviceCaps
CreateCompatibleDC
DeleteObject
CreateBitmap
BitBlt
SetBkColor
GetStockObject
CreateSolidBrush
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleBitmap
GetObjectW
GetObjectW
GetTextExtentPoint32W
GetTextMetricsW

kernel32

lstrlenW
SetFilePointer
HeapFree
LeaveCriticalSection
GetModuleHandleW
DeleteCriticalSection
MultiByteToWideChar
GetModuleHandleA
GetModuleHandleW
TerminateProcess
ReadFile
lstrlenW
VirtualAlloc
CloseHandle
LocalFree
SetEvent
GetProcAddress
GetCurrentThreadId
FormatMessageW
GetProcessHeap
LoadLibraryA
TerminateProcess
GetModuleFileNameA
HeapAlloc
ExitProcess
GetACP
SetEvent
GetProcessHeap
DeleteCriticalSection
HeapAlloc
GetProcessHeap
GetLastError
LoadLibraryExA
VirtualFree
lstrlenW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

efdc40f4287af211bb01a19e48a5260c

Headers

File Characteristics

Imports

user32

gdi32

kernel32

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 133KB - Virtual size: 136KB

.rdata Size: 3KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 133KB - Virtual size: 136KB

.rdata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 4KB