fb764d2142eac4fafee36e6a77e46066_JaffaCakes118

General

Target

fb764d2142eac4fafee36e6a77e46066_JaffaCakes118
Size

111KB
MD5

fb764d2142eac4fafee36e6a77e46066
SHA1

bcb7bd1db2e66a469ebf9a34a1303d5ae0059e96
SHA256

00477f24e227f9db523df0b465f74b2207a31c79f37382cccff33201fb43ce3a
SHA512

d47851787c7579ef306577ff0169adccce39fd65677455cf39a5fef9cdac0a34d1f9ea36226530618bc9cffef2d9f4081b1ae88f9c9c9847d80c6079245bc9dc
SSDEEP

1536:Lb38qvlLbv/mhgBdJT/vw/Jn3RI0cEzGpz87l+m8o81CJUEbooPRrKKRBI:LbR9bXpTnEJnCYz5wm8oKCJltZrpRB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb764d2142eac4fafee36e6a77e46066_JaffaCakes118

Files

fb764d2142eac4fafee36e6a77e46066_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8ad2287940c8289cb06b675cd04c1f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetFileSize
VirtualProtect
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
ReadFile
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetModuleHandleA
WriteFile
GetVersion
GetProcAddress
HeapReAlloc
GetTickCount
GetFileType
GetStringTypeW
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle

user32

CreateWindowExA
wsprintfA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
EndPaint
ShowWindow
UpdateWindow
LoadStringA
FindWindowA
DefWindowProcA
BeginPaint
DrawTextA

gdi32

Rectangle

advapi32

RegOpenKeyExA
RegCloseKey
RegSetValueExW

ole32

CoInitialize

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.BSS
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8ad2287940c8289cb06b675cd04c1f7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 20KB - Virtual size: 19KB

.BSS Size: 52KB - Virtual size: 49KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 28KB - Virtual size: 27KB

.text
Size: 20KB - Virtual size: 19KB

.BSS
Size: 52KB - Virtual size: 49KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 28KB - Virtual size: 27KB