fb50dfeb104483577700d4cd8a2a96bc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fb50dfeb104483577700d4cd8a2a96bc_JaffaCakes118
Size

103KB
MD5

fb50dfeb104483577700d4cd8a2a96bc
SHA1

46413f445664948368dfb47648ccebd1a8f2c7e3
SHA256

97517e06367ecb5036d10ca34864a88bcb327d1f0ecf7f153cc123b6f92400bc
SHA512

60216baad9b818dbd2ca708c8caff0bd652287d2ed3b32d9ffc0cf55f54658100c14d9106b932635d4182e58602e2dae5460aa9746572bb0f3d926d90c73fed2
SSDEEP

1536:lb0aiiz5PHwQce7YEhfqaW1qLs2I17Ui3nwbtRUQ8l3uyiISdRHIXN4:lb0aT53RlqaW14sLrA7UNl3uyirIN4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb50dfeb104483577700d4cd8a2a96bc_JaffaCakes118

Files

fb50dfeb104483577700d4cd8a2a96bc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fa69d88a723b3e29155f951780eed626

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
GetDateFormatA
GlobalAddAtomW
InterlockedDecrement
GetProcessVersion
DeviceIoControl
GetProcAddress
lstrcmpW
FormatMessageW
GetPrivateProfileIntW
GetFileAttributesW
WideCharToMultiByte
LocalLock
InterlockedIncrement
CreateDirectoryW
HeapFree
CreateFileW
SetLastError
GetTempPathW
WriteFile
SetFilePointer
GetTimeFormatW
DuplicateHandle
CloseHandle
CopyFileW
GetCurrentThreadId
DeleteFileW
GetCurrentProcessId
GetPrivateProfileSectionW
GetModuleHandleA
GetWindowsDirectoryW
GetFileSize
lstrcmpiW
ReadFile
DnsHostnameToComputerNameA
IsWow64Process
GetFullPathNameW
GlobalWire
GetExitCodeProcess
lstrlenA
BackupRead
GetTempPathA
GetProcessHeap
FreeLibrary
GetSystemDirectoryW
IsValidLocale
LocalAlloc
GetVolumeInformationW
SetThreadPriority
GlobalFree
GetThreadLocale
CreateFileA
IsBadCodePtr
SwitchToThread
lstrlenW
GetTickCount
GetFileTime
HeapAlloc
GetDateFormatW
RaiseException
SetCurrentDirectoryW
GetCurrentProcess
RemoveDirectoryA
WaitNamedPipeW
GetCommandLineW
LocalReAlloc
ReleaseMutex
GetStartupInfoA
OpenEventW
GetSystemTimeAsFileTime
GetModuleFileNameW
GlobalAlloc
QueryPerformanceCounter
MultiByteToWideChar
GetLogicalDriveStringsW
GetPrivateProfileStringW
LocalFree
CreateMutexW

gdi32

GetStockObject

user32

GetWindowDC
IsRectEmpty
GetWindowInfo
SetFocus

comctl32

ImageList_Create
ImageList_Destroy
ImageList_AddMasked

shell32

SHGetFileInfoW
SHFileOperationW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rxdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 139KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa69d88a723b3e29155f951780eed626

Headers

File Characteristics

Imports

kernel32

gdi32

user32

comctl32

shell32

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 7KB - Virtual size: 117KB

.rxdata Size: 5KB - Virtual size: 5KB

.pdata Size: 139KB - Virtual size: 243KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 7KB - Virtual size: 117KB

.rxdata
Size: 5KB - Virtual size: 5KB

.pdata
Size: 139KB - Virtual size: 243KB