f8ae3fc0fa5350d42878cbc2f1305937_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f8ae3fc0fa5350d42878cbc2f1305937_JaffaCakes118
Size

148KB
MD5

f8ae3fc0fa5350d42878cbc2f1305937
SHA1

5c8aa0e920d6030508fc7c98df66109ceeca376e
SHA256

e21182b21b5d112921c5295b73fa70c514b1052b419143f3b23b0e6807727e70
SHA512

759d2edb53a9689a49b8c0d1d4af1f7fef2ec2fe31645e3420adaab01cb2cba0ae5f6e6e16af54fb3b1aa45cb034d98bca46568d4f5f0cc46f16b8fb29667fdc
SSDEEP

3072:PWbeau1GwgGe4+NRBL/JlZTV4tNCbCv1/tm48El9TqgCgHSiJgIBXgOF+4C:PQeBCkaRV/JlZmPC+9/TtESS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8ae3fc0fa5350d42878cbc2f1305937_JaffaCakes118

Files

f8ae3fc0fa5350d42878cbc2f1305937_JaffaCakes118
.exe windows:6 windows x86 arch:x86

7b80158b34b2524ba3dd05ee4fcdb32a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
HeapCreate
SetConsoleScreenBufferSize
GetThreadId
IsThreadAFiber
SetProcessWorkingSetSizeEx
GetExitCodeProcess
CreateFileW
GetProcessVersion
GetCommandLineW

user32

IsDialogMessageA
GetFocus
CountClipboardFormats
GetWindowInfo
GetMessagePos
ShutdownBlockReasonDestroy
CreateIconIndirect
IsCharUpperA

advapi32

IsValidAcl

winscard

SCardGetStatusChangeW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 4KB - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ida
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt1
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b80158b34b2524ba3dd05ee4fcdb32a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

winscard

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 8KB

.qdata Size: 4KB - Virtual size: 182B

.code Size: 20KB - Virtual size: 18KB

.crt Size: 48KB - Virtual size: 47KB

.ida Size: 20KB - Virtual size: 16KB

.crt1 Size: 20KB - Virtual size: 19KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 456B

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 8KB

.qdata
Size: 4KB - Virtual size: 182B

.code
Size: 20KB - Virtual size: 18KB

.crt
Size: 48KB - Virtual size: 47KB

.ida
Size: 20KB - Virtual size: 16KB

.crt1
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 456B