db44362c3dca65ee52f8d452a3b260ea_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

db44362c3dca65ee52f8d452a3b260ea_JaffaCakes118
Size

77KB
MD5

db44362c3dca65ee52f8d452a3b260ea
SHA1

4e8905f6418f28ec900c61fc778f30917d12ba27
SHA256

0a008f6e9a235057d2b5644ffba1ef66907e6b8dd025684e54f6db9e58e761e6
SHA512

eacc56308e9ba4fb601a333e07cd36efa834d871643d823b812cdd68bd928d191d4bc106a9cc5da1c3d80a05d7f45cbd97e64649ef9147fc584059860c39f1b8
SSDEEP

1536:ykruyohNGidPT6pyQu0+Ga2/xnWQuwLYVnrcY5n2TviQdgrsfroTEKZ:ykrzouiVTM/wyZ9uCUfl06FXEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db44362c3dca65ee52f8d452a3b260ea_JaffaCakes118

Files

db44362c3dca65ee52f8d452a3b260ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4add477bc1e84e500caec928862eb399

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
GetDateFormatA
lstrlenA
VirtualAllocEx
GetCurrentThreadId
LoadLibraryA
GetThreadLocale
ExitProcess

comctl32

ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Read
ImageList_Draw
ImageList_DrawEx
ImageList_Add
ImageList_Create

user32

GetMenu
SetClipboardData
IsDlgButtonChecked
SetFocus
SetMenu
GetWindow
SetForegroundWindow

gdi32

CreatePalette
CreateCompatibleBitmap
GetTextColor

Exports

Exports

_TM0pCta@16
_veG0QUatL@16
qq7Z4X4aTYI@20
4AQgOq@12
_FV7NNKVi@20
akfBi6Lm
_xpWnoMc2aVE49@12
cO5OtVFd
_kqaZxmum
YyWiUrWt
_WX5lmlb
_PWn1Liu0
KbZBIf_
I7i2tuJlt@4
_bshkm8ZTHAI5@20
XCTvHVoMBqZ
93VytYzrIfCbh
_2FKDSYLt0fv2K
_H0RK5VCu3KAx
_6iDAnf@20
_fGLAnS@4
_IpcHzIF8IHi@4
_vcYCSF
z4bfbeo
WJpefxVt7RYLz@16
_8Da_YwmuyuP_d@16
Ch9VA2BcF@16
_mOzjH
_x8TuDF9BUQWs
_gUEZihZ8g
_ngbnW0t@24
AEDwrcwdw
_CtRvGxBUmR@16
_Ct5QSTMV3BSEo@4
0_IUiT1Y6@16
_4Ig0uQ4CryR2P
_Hbwwlx@20
75vqQ@24
FR82tB@4
_QnkXc0J3KkOn2
jKcdgvnI1w
c5me41d@16
_WVpSO74kXA
_3uo_sAvY1
kR4LjQE4hpEN15
x1K6128
EFegh7mJlk
_XvWL2WpSeZEcJ@16
_E7hSW@4
pd7m5yqTAxC2br

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 865B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4add477bc1e84e500caec928862eb399

Headers

File Characteristics

Imports

kernel32

comctl32

user32

gdi32

Exports

Exports

Sections

CODE Size: 15KB - Virtual size: 14KB

.data Size: 9KB - Virtual size: 9KB

.ihdata Size: 48KB - Virtual size: 48KB

.idata Size: 1024B - Virtual size: 865B

.thdata Size: 512B - Virtual size: 436B

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 15KB - Virtual size: 14KB

.data
Size: 9KB - Virtual size: 9KB

.ihdata
Size: 48KB - Virtual size: 48KB

.idata
Size: 1024B - Virtual size: 865B

.thdata
Size: 512B - Virtual size: 436B

.rsrc
Size: 1KB - Virtual size: 1KB