e1a1b51427229cf88ca665a0060995db_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e1a1b51427229cf88ca665a0060995db_JaffaCakes118
Size

762KB
MD5

e1a1b51427229cf88ca665a0060995db
SHA1

1a499f010ae2b9267ca1504e9cabf243ab38d00b
SHA256

a9cdd6281a26c48111c30ecc03d8240a34c7a9fdd1369ff392f78d4ee0e2bb37
SHA512

3deba56641dacbc463eaeacfe645b3c21d8fb0e72822ba24c447f05b4a077c78da5718877913a79db8adb718171fc2fab20e84a11f3d8b8571d14e57f9a9f203
SSDEEP

12288:ZRJYT/e1kCu0WzrP5lgSvPpMRzSUXLBtQD7NtnFCM5HAULkO4E8i:ZoT/MfvSrkSvPwzS0tMNt8WH8i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1a1b51427229cf88ca665a0060995db_JaffaCakes118

Files

e1a1b51427229cf88ca665a0060995db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa51224847153e17962bd0c9d19c6121

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType
MessageBoxA

kernel32

GetACP
GetModuleHandleA
GetProcAddress
VirtualProtect

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

winmm

timeGetTime

comctl32

_TrackMouseEvent

Sections

.text
Size: - Virtual size: 988KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 56B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 729KB - Virtual size: 728KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa51224847153e17962bd0c9d19c6121

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

winmm

comctl32

Sections

.text Size: - Virtual size: 988KB

.itext Size: - Virtual size: 4KB

.data Size: - Virtual size: 17KB

.bss Size: - Virtual size: 24KB

.idata Size: - Virtual size: 12KB

.tls Size: - Virtual size: 56B

.rdata Size: 512B - Virtual size: 24B

.vmp0 Size: - Virtual size: 59KB

.rsrc Size: 31KB - Virtual size: 329KB

.vmp1 Size: - Virtual size: 60KB

.vmp2 Size: 729KB - Virtual size: 728KB

.reloc Size: 512B - Virtual size: 176B

.text
Size: - Virtual size: 988KB

.itext
Size: - Virtual size: 4KB

.data
Size: - Virtual size: 17KB

.bss
Size: - Virtual size: 24KB

.idata
Size: - Virtual size: 12KB

.tls
Size: - Virtual size: 56B

.rdata
Size: 512B - Virtual size: 24B

.vmp0
Size: - Virtual size: 59KB

.rsrc
Size: 31KB - Virtual size: 329KB

.vmp1
Size: - Virtual size: 60KB

.vmp2
Size: 729KB - Virtual size: 728KB

.reloc
Size: 512B - Virtual size: 176B