d224db15fd0d466c974f1912d78f2304_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d224db15fd0d466c974f1912d78f2304_JaffaCakes118
Size

257KB
MD5

d224db15fd0d466c974f1912d78f2304
SHA1

0971841af8e1a07bd81a213114e02a0e34c23348
SHA256

8ca77b1e1d13979a34e919a4388a1cbbc754619e3a79fc4348cfff1bbf03f4fc
SHA512

2c99b18aaee35312dce5acc21d8f85b137fc09c54025bf148218b033e11eac3d2d30667136c3fdd426d26ff144c592bb2f3efb880b2b24bdf0bcbe8c3d117e88
SSDEEP

6144:adZOqpOODuHL/us9cYWGxIxRpxQL+kRiBChDp7MpxXTq2:KkODuHyseYW2IzT4R3ht7Mx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d224db15fd0d466c974f1912d78f2304_JaffaCakes118

Files

d224db15fd0d466c974f1912d78f2304_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9226372961b736e140670af607ea1b7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
ExitProcess
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
GetVersionExA
GetProcessHeap
GetLastError
TlsAlloc
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
Sleep
GetEnvironmentVariableA
HeapCreate
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
LoadLibraryA
InitializeCriticalSection
MultiByteToWideChar
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
LoadLibraryW
GetLocaleInfoA
GetLocaleInfoW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatA
GetDateFormatA
Beep
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
CreateDirectoryA
RemoveDirectoryA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
MoveFileA
RaiseException
GetExitCodeProcess
WaitForSingleObject
GetSystemInfo
DuplicateHandle
CreatePipe
SystemTimeToFileTime
BeginUpdateResourceW
GetProcAddress

security

SealMessage
CompleteAuthToken

user32

EnableWindow
CopyIcon
SetWindowLongW
CreateDialogIndirectParamA
LoadMenuW
DestroyCursor
TrackPopupMenuEx
RegisterWindowMessageA
GetMenuStringW
wsprintfW
CreateWindowExA
FindWindowW
GetMenuStringA
SetActiveWindow
IsWindow
GetMenuItemInfoA
SetFocus
OffsetRect
RegisterClassExA
WaitForInputIdle

gdi32

RemoveFontResourceExW
CreateColorSpaceW
GetTextExtentPointW
CreateScalableFontResourceW
CreateFontIndirectA
CreateFontW
CreateFontIndirectW

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.F
Size: 3KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aGH
Size: 92KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.t
Size: 4KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pOIs
Size: 2KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XFP
Size: 1KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Cvhg
Size: 122KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9226372961b736e140670af607ea1b7c

Headers

File Characteristics

Imports

kernel32

security

user32

gdi32

Sections

.text Size: 14KB - Virtual size: 16KB

.F Size: 3KB - Virtual size: 229KB

.aGH Size: 92KB - Virtual size: 137KB

.t Size: 4KB - Virtual size: 257KB

.rdata Size: 3KB - Virtual size: 26KB

.pOIs Size: 2KB - Virtual size: 174KB

.XFP Size: 1KB - Virtual size: 52KB

.data Size: 5KB - Virtual size: 173KB

.Cvhg Size: 122KB - Virtual size: 218KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 14KB - Virtual size: 16KB

.F
Size: 3KB - Virtual size: 229KB

.aGH
Size: 92KB - Virtual size: 137KB

.t
Size: 4KB - Virtual size: 257KB

.rdata
Size: 3KB - Virtual size: 26KB

.pOIs
Size: 2KB - Virtual size: 174KB

.XFP
Size: 1KB - Virtual size: 52KB

.data
Size: 5KB - Virtual size: 173KB

.Cvhg
Size: 122KB - Virtual size: 218KB

.rsrc
Size: 8KB - Virtual size: 7KB