d4483f396488e893780715d0ca228eee_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d4483f396488e893780715d0ca228eee_JaffaCakes118
Size

85KB
MD5

d4483f396488e893780715d0ca228eee
SHA1

b9b3f8a350966ec4c83baad0480a4b75a660ae96
SHA256

847fe6653d24f902efb67b250f7e69eee415b63e7491a5b95df12c293aa4c57d
SHA512

b452a39995ca0e7e9d2fbc91c792a1855960672ffb7cecba489edb1edc19a0f33dc4c9eb2404978a998cbba75d76bec3d25b586758d0b760fd0798980308e2fd
SSDEEP

1536:lDVsgE1q6zpcTobNDbxwAr/4THvO90tlEy4c0:BVsgCnLb9br8vO900

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4483f396488e893780715d0ca228eee_JaffaCakes118

Files

d4483f396488e893780715d0ca228eee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc975be1bfc429af8a63fa4182a706fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHQueryInfoKeyA
PathFileExistsA
SHGetValueA
SHSetValueA
PathIsDirectoryA
SHStrDupA

kernel32

VirtualAlloc
WideCharToMultiByte
lstrcpyA
FindClose
SetHandleCount
GetStdHandle
GetVersion
LocalAlloc
GetCommandLineA
LoadLibraryA
GlobalAlloc
FreeResource
FormatMessageA
VirtualFree
IsBadHugeReadPtr
GetModuleHandleA
FindFirstFileA
VirtualQuery
ExitProcess
GetTickCount
GetLocalTime
ExitThread

user32

EqualRect
FillRect
GetMenuStringA
DestroyIcon
SetScrollInfo
InsertMenuItemA
EnableMenuItem
SetParent
CharNextA
MapVirtualKeyA
DrawFrameControl
EnableWindow
GetFocus
IsWindowEnabled
SetClassLongA
GetForegroundWindow
GetLastActivePopup
GetWindowTextLengthA
CharLowerA
MoveWindow
CreateMenu
InvalidateRect
DispatchMessageA
SetCursor
EmptyClipboard
GetSystemMetrics
GetMenu
SetFocus
CreateIcon
DefMDIChildProcA
GetKeyboardLayoutList
IsRectEmpty
RegisterClassA
GetCursor
InsertMenuA
EnableScrollBar
WaitMessage
DefFrameProcA
OpenIcon
GetScrollInfo
GetParent
GetDesktopWindow
IsZoomed
SetWindowTextA
SetActiveWindow
CharToOemA
GetCapture
LoadCursorA
PostMessageA
GetWindowRect
MessageBeep
GetMenuState
ClientToScreen
TrackPopupMenu
IsDialogMessageA
GetWindowPlacement
CharUpperA
OpenClipboard
EnumWindows
SetScrollPos
GetKeyboardState

Exports

Exports

_p8tcTHc3
_zjC50N7Rr@4
_AGgE6pOO@12

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc975be1bfc429af8a63fa4182a706fc

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 11KB - Virtual size: 34KB

.edata Size: 46KB - Virtual size: 45KB

.idata Size: 4KB - Virtual size: 3KB

.bdata Size: 512B - Virtual size: 482B

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 11KB - Virtual size: 34KB

.edata
Size: 46KB - Virtual size: 45KB

.idata
Size: 4KB - Virtual size: 3KB

.bdata
Size: 512B - Virtual size: 482B

.rsrc
Size: 9KB - Virtual size: 8KB