bf18b575bf8527c181dfdcd392e6269c_JaffaCakes118

General

Target

bf18b575bf8527c181dfdcd392e6269c_JaffaCakes118
Size

78KB
MD5

bf18b575bf8527c181dfdcd392e6269c
SHA1

41a9eae9d3171e337e7541eecf15b45f75c46d62
SHA256

9402a092a3e884ddb785b5857a1101b9aaa19712b08b92f39960a58b225bd76c
SHA512

6e7aff5a70ada6556752cc467a9341196d710496d71ede46efd4b0a687825659db30d60786e84eef1148d33105ba34df675a50a458e2e39b716e93d2cc16cb50
SSDEEP

1536:4UGYJByMVqKY5eUOQOC9B3j1h30qD2zOztlKspbaDYwLkRC:4leBHVqKHQjnxh30qDVztfmzIC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf18b575bf8527c181dfdcd392e6269c_JaffaCakes118

Files

bf18b575bf8527c181dfdcd392e6269c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

218b51fd279d10a264d394d492a4bd87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetTopWindow
IsWindowEnabled
GetMenu
TranslateMDISysAccel
SystemParametersInfoA
GetCursor
KillTimer
TrackPopupMenu
TranslateMessage

version

VerInstallFileA
GetFileVersionInfoSizeA

kernel32

GetDateFormatA
VirtualAlloc
GetCurrentThreadId
ExitProcess
GetCommandLineA
GetDiskFreeSpaceA
GetCurrentProcessId
LoadLibraryA

comctl32

ImageList_Create
ImageList_Add
ImageList_Destroy
ImageList_Read
ImageList_Write
ImageList_GetBkColor
ImageList_DrawEx

Exports

Exports

h21pHC472@24
tcP_VaTaB0_T@12
kP7em
mMDeqUmeCWyuc2
JctS8uR
zUlUg6Etf
K3agxx__Y2zlIj@16
FCb4XB@20
_ivhEnv487u6tOF
_WLmN40Sjz8wLB@12
CTR_d_Vb9
_XFD3tDOAL@20
MQVDe@12
F2TuclnQ0@8
_a_wI8T55_U88@24
_3R2ng
_jk3QVQ
_KGeGuiNeC@12
_xiJ4XA_lK
8t96thmJ6epi
XG51uu0oSW7Mn
_QZutguymil1@8
ox2wq0Ck4Jsu9
_rZL7B
Vo_6Zm4LY7qY@20

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

218b51fd279d10a264d394d492a4bd87

Headers

File Characteristics

Imports

user32

version

kernel32

comctl32

Exports

Exports

Sections

CODE Size: 14KB - Virtual size: 13KB

.data Size: 10KB - Virtual size: 9KB

.ihdata Size: 49KB - Virtual size: 49KB

.idata Size: 1024B - Virtual size: 882B

.thdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 14KB - Virtual size: 13KB

.data
Size: 10KB - Virtual size: 9KB

.ihdata
Size: 49KB - Virtual size: 49KB

.idata
Size: 1024B - Virtual size: 882B

.thdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB