fbc393714ee7c3c58dc8e6c15fb3fe20_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fbc393714ee7c3c58dc8e6c15fb3fe20_JaffaCakes118
Size

224KB
MD5

fbc393714ee7c3c58dc8e6c15fb3fe20
SHA1

b4ba3846476c36b8c474dad9ffc2abeb6393af9f
SHA256

1bd61bbdd3176ee11667f2260e5ff79e3c9faf06fb76c37d93e0dfe60b7bb24d
SHA512

0831f9ecc1f936b9ebc55849a7a6326601875046f8ed55090af77fee3ffa92ddcc2c98dee6b6cc6123244b7357cdcd713da3a2a86baee6640cae0ef44aa25c59
SSDEEP

3072:OZakl9adswGfNwREseM68qVGTlcMo+ixXlYeuo/qhy:OT1fOex8H5cKix1hey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbc393714ee7c3c58dc8e6c15fb3fe20_JaffaCakes118

Files

fbc393714ee7c3c58dc8e6c15fb3fe20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8be2aaa8433b71082383c5729c954826

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
LoadLibraryA
VirtualAlloc
GetProcAddress
GetModuleHandleA
ReleaseSemaphore
ResetEvent
FileTimeToSystemTime
GetLastError
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
VirtualProtect
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
FindNextFileA
LCMapStringW
Sleep
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
HeapFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
GetSystemInfo
FreeEnvironmentStringsW
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings

user32

FindWindowA
GetWindowRect
SendMessageA
GetWindow
SetCursorPos
UpdateWindow
InSendMessage
LoadCursorA
GetDesktopWindow
GetDC
GetCursorPos
SetTimer
ReleaseDC
CreateIcon
IsIconic
SetCursor

gdi32

SetPixel
PatBlt

shell32

SHGetFolderLocation
ShellAboutA

psapi

GetProcessMemoryInfo
EnumProcesses
GetModuleInformation

msvfw32

DrawDibDraw
DrawDibSetPalette

ws2_32

WSACleanup
WSAStartup

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8be2aaa8433b71082383c5729c954826

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

psapi

msvfw32

ws2_32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 180KB - Virtual size: 177KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 180KB - Virtual size: 177KB