fec308993f947f32c27a9c73ef18a39f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fec308993f947f32c27a9c73ef18a39f_JaffaCakes118
Size

106KB
MD5

fec308993f947f32c27a9c73ef18a39f
SHA1

e549704cbdc104c27abf8bd652f0a1845c8fdb0c
SHA256

d10d6cff27cdc778bd44565f6a1a435af5d118780500670b0ed9cd4d4132091d
SHA512

ac5f6d583e6bcc7863afb726b66c3b056c864177cb1a9f317affe3b55256c038ac2ca59c004b3006d61c80eccf4d28a56917cddfad3b61ff7acd8488fc77805f
SSDEEP

1536:PoHPsTF8QWlJkSJVtqCvOmpR58V8rsKTqECtOBUFQX1n/WYG7V4Rb:tWVqiS8rsKmD+UFktG7V4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fec308993f947f32c27a9c73ef18a39f_JaffaCakes118

Files

fec308993f947f32c27a9c73ef18a39f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

017006d1c5e500e7b16d79353466e867

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerFindFileA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetModuleFileNameA
GetCurrentThreadId
GetProcAddress
VirtualAlloc
VirtualQuery
EnumCalendarInfoA
ExitProcess
GetVersion
GetFileType
ExitThread
VirtualAllocEx
lstrcmpiA
GetEnvironmentStrings
GetCommandLineA
GetModuleHandleA
FreeLibrary
SetEvent
ResetEvent
SetErrorMode
CompareStringA
HeapDestroy
HeapAlloc
DeleteFileA

shell32

DragQueryFileA
SHGetDiskFreeSpaceA

user32

SetCursor
GetCursorPos
GetWindowDC
IsIconic
GetWindowPlacement
LoadKeyboardLayoutA
GetKeyboardState
CharNextW
SetMenuItemInfoA
GetScrollPos
SetPropA
GetMenuState
RegisterClassA
EndPaint
InvalidateRect
DefMDIChildProcA
GetMenuStringA
ScreenToClient
GetScrollInfo
IsRectEmpty
EmptyClipboard
IsChild
InflateRect
FillRect
SetScrollInfo
GetWindowLongW
AdjustWindowRectEx
GetKeyboardLayoutNameA
ShowOwnedPopups
GetFocus
GetSysColor
GetLastActivePopup
RedrawWindow
CharLowerA
UnregisterClassA
GetCapture
DrawAnimatedRects
TranslateMDISysAccel
GetDesktopWindow
CloseClipboard
SetWindowLongA
IsDialogMessageA
IsWindowEnabled
SetScrollRange
GetCursor
CharToOemA
LoadIconA
RemovePropA
ActivateKeyboardLayout
CreateIcon
TrackPopupMenu
MapVirtualKeyA
SetForegroundWindow
DestroyIcon
ReleaseCapture
OpenClipboard
CharNextA
ClientToScreen
GetIconInfo
CharLowerBuffA
EnumChildWindows
wsprintfA

gdi32

CreateDIBSection
GetCurrentPositionEx
GetClipBox
SetBkColor
SaveDC
GetRgnBox
GetPaletteEntries
CreatePalette

Sections

CODE
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

017006d1c5e500e7b16d79353466e867

Headers

File Characteristics

Imports

version

kernel32

shell32

user32

gdi32

Sections

CODE Size: 32KB - Virtual size: 31KB

.rdata Size: 3KB - Virtual size: 2KB

DATA Size: 69KB - Virtual size: 69KB

CODE
Size: 32KB - Virtual size: 31KB

.rdata
Size: 3KB - Virtual size: 2KB

DATA
Size: 69KB - Virtual size: 69KB