d68a8399230309d17b66edd414229873_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d68a8399230309d17b66edd414229873_JaffaCakes118
Size

257KB
MD5

d68a8399230309d17b66edd414229873
SHA1

58df04baf5e914906abcdc5f7980e7bf20993cd8
SHA256

592e4b857eaf81cce340596526857ef90b88f9cc9d7fe254b8ae7e7eeacd250b
SHA512

e777e496e00daa1a827074e0ae39b05ae880c173349df5f9b2ceff14978ed897160175f080fd57aebebc2688f22a2baab3ad1554af46c2995ee9cccf1fb542ce
SSDEEP

6144:ZwuuNorx8FGq99QkbJFsNfoSE4xUEPq6U6:WD2FKKkdFvGxUmqV6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d68a8399230309d17b66edd414229873_JaffaCakes118

Files

d68a8399230309d17b66edd414229873_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2832f9973ab344026d2e98ff0a53c69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenu
RegisterClassA
CreateMenu
GetWindowDC
RedrawWindow

comctl32

ImageList_Draw
ImageList_DrawEx
ImageList_Write
ImageList_Create

oleaut32

SysReAllocStringLen
VariantChangeType
SysStringLen
SafeArrayGetElement
GetErrorInfo
SysFreeString

kernel32

GetCurrentProcessId
GetFullPathNameA
WriteFile
ExitProcess
RaiseException
GetStdHandle
lstrlenW
EnterCriticalSection
SetHandleCount
GetCurrentProcess
WideCharToMultiByte
LocalAlloc
GetCommandLineW
VirtualAllocEx
GetModuleHandleW
GetUserDefaultLCID
GetTickCount
GetVersion
LoadLibraryA
GetProcessHeap
GetDiskFreeSpaceA
GetSystemDefaultLangID
SetThreadLocale
GetCPInfo
GlobalAlloc
DeleteCriticalSection
WaitForSingleObject
GetThreadLocale
FreeLibrary
LocalReAlloc
GetLastError
GlobalAddAtomA
GetEnvironmentStrings
SizeofResource
GetTempPathA
HeapDestroy
VirtualAlloc
Sleep
DeleteFileA
GetVersionExA
InitializeCriticalSection
GetStartupInfoA
SetEndOfFile
LockResource
IsBadReadPtr
ResetEvent
GetLocalTime
SetErrorMode
HeapAlloc
lstrcmpiA
CreateThread
lstrcmpA
FormatMessageA
GetCurrentThread

Exports

Exports

_XBMLmudpqA2@4
W0_j5Ku@4
_qLtBeS@24
AV3ATS9B@4
G2Jlvhsh@8
_jlc2N@24
0RO_Jv@16
TjADImoU6WlmFj
39cgMwcoMY
_SJevSry
_if4x1l_v
IlCpp1uc
_Ua__x
xy0Yvm8mjqyCx
_1jrwZ
2MrapH
jhkRv
_ElWOaRNkWR@4
_606MEPMK@4
_8SDvr3I7b1g
lAdjH
_A5uAie2Ntb@8
_Cs_0Q6vqxMWh
_Frz9DhEFZruc
s4stEm3GlBC
_XpYdV@8
_VVUoNe8xjT@24
KRSqGW7@4
_Zg_vm
H6DEkeeIQjw5@12
_T33IVWjbB6gX
_H2I0tGiQMTRDSN@12
xKl1SCjNe
_4ZTcby_m9vy
aAs4X
_pXqJX8CkulMx@12
_LA9OPlQLHk6@24
9FLkv9Sgyq4c@12
_2DXCm_
_NR8jZWhIGva
_7RgEDOQ
yIAdu
cRYXqwCXZ49
YyNYUkv_VYE7E
g_gdph
_wGnTo2HCmu@12
_yhRAsr
_T5GiBtx5EOx
_9MIT7b_7S0@20
rGwzc4z7lwB
gXQyjJ_2siF
_1AeLPQWXC4N@8
_wdnwysG_FBqx@8
MlwhCyUY
zTydbQF@16
_ywHsg6ns1e
_MOMqxPcpG_weOt
_Qa1rXl@24
_bNisN0_iWnU2O@12
_6uSFZT
_BUVNGxu79LJT@8
X_eX3d0
svqDI@8
_miTmzjoQ3iRJF
EYdXCVX7@16

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 798KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iudata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2832f9973ab344026d2e98ff0a53c69

Headers

File Characteristics

Imports

user32

comctl32

oleaut32

kernel32

Exports

Exports

Sections

CODE Size: 32KB - Virtual size: 32KB

DATA Size: 11KB - Virtual size: 798KB

.iudata Size: 207KB - Virtual size: 207KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 32KB - Virtual size: 32KB

DATA
Size: 11KB - Virtual size: 798KB

.iudata
Size: 207KB - Virtual size: 207KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB