db00a21e7c21e22df3698ea08e883ebc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

db00a21e7c21e22df3698ea08e883ebc_JaffaCakes118
Size

8KB
MD5

db00a21e7c21e22df3698ea08e883ebc
SHA1

261bd5992e4212b85562ba630db899ce869b5b77
SHA256

5d6041d9e335f3237dd156a2f5e18617953b2949ee883e24e6b79f79e93a983a
SHA512

5a6698665f5d801e6f146d049cbfcc0499c32aa2d802b17bc2b99999041aff327d0d1680c91479e9a5b46f74fe2017f1f49c137aecf05b7a9660fc9bec45b5a3
SSDEEP

96:mkrMdofDqw9rZqId62RD8MocV8VOazkOa7mzruVAd6E0Ct5M:ZIKfDqw9rM2xocV8VOFOaKzruVW6Evm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db00a21e7c21e22df3698ea08e883ebc_JaffaCakes118

Files

db00a21e7c21e22df3698ea08e883ebc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4ac2413e8c65e6b7a9fd82013be25ea7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\B407-01\Desktop\apI이랑께\Release\apI이랑께.pdb

Imports

user32

EndPaint
GetMessageA
PostQuitMessage
LoadIconA
InvalidateRgn
BeginPaint
TranslateMessage
CreateWindowExA
DefWindowProcA
ShowWindow
DispatchMessageA
LoadCursorA
RegisterClassA

gdi32

TextOutA
GetStockObject

msvcr100

_XcptFilter
_ismbblead
_exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_cexit
__getmainargs
_amsg_exit
exit

kernel32

GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
GetCurrentProcessId
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
GetStartupInfoW
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
HeapSetInformation

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ac2413e8c65e6b7a9fd82013be25ea7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

gdi32

msvcr100

kernel32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1024B - Virtual size: 514B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 514B