ff203217933a0cd430f15aa1dee55bdb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ff203217933a0cd430f15aa1dee55bdb_JaffaCakes118
Size

189KB
MD5

ff203217933a0cd430f15aa1dee55bdb
SHA1

03ce9909bd84ace22a11943b61d8948478a82b11
SHA256

88831fab6f1722c17a1433a22958fe9ead4b0c4e02fc655a0a2d936718182d24
SHA512

5856dac959ff205703885f46b88a360a190eacaf3b58c8e52fb2074b2f2e91d0b2cb70d2049a69756375128254af614712028eb3632ae24f479d5e1fe34781c4
SSDEEP

3072:C87jr7bCIAGtuyairqUu1YTkFIcnri19+OAhOOtfdC+yn:C8jCxMuy/u1YeIcnrQ97AFhk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff203217933a0cd430f15aa1dee55bdb_JaffaCakes118

Files

ff203217933a0cd430f15aa1dee55bdb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d209331adbc5994a76b5aba1c45501ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
IsBadReadPtr
GetCommandLineA
ExitThread
VirtualAllocEx
GetLastError
GetVersionExA
GetModuleHandleA
ExitProcess
GetModuleHandleW
LoadLibraryExA
VirtualAlloc

oleaut32

GetErrorInfo
OleLoadPicture
SysFreeString
SafeArrayUnaccessData

gdi32

GetObjectA
GetBitmapBits
GetDIBColorTable
SetBkColor
RestoreDC
CopyEnhMetaFileA
GetPaletteEntries
GetDCOrgEx
CreateDIBSection
CreateBrushIndirect

shell32

SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHGetFolderPathA
SHGetSpecialFolderLocation
DragQueryFileA

ole32

CoGetMalloc
CoRevokeClassObject
CoRegisterClassObject
CoUnmarshalInterface
StringFromIID
CreateBindCtx
CoGetObjectContext
CoDisconnectObject
CoFreeUnusedLibraries
CoUninitialize

comctl32

ImageList_Write
ImageList_GetBkColor

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res8
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res5
Size: 1024B - Virtual size: 743B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res2
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res6
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d209331adbc5994a76b5aba1c45501ae

Headers

File Characteristics

Imports

kernel32

oleaut32

gdi32

shell32

ole32

comctl32

Sections

.text Size: 56KB - Virtual size: 55KB

DATA Size: 1KB - Virtual size: 1KB

.res8 Size: 1024B - Virtual size: 948B

.res5 Size: 1024B - Virtual size: 743B

.res2 Size: 16KB - Virtual size: 15KB

.res6 Size: 111KB - Virtual size: 110KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 55KB

DATA
Size: 1KB - Virtual size: 1KB

.res8
Size: 1024B - Virtual size: 948B

.res5
Size: 1024B - Virtual size: 743B

.res2
Size: 16KB - Virtual size: 15KB

.res6
Size: 111KB - Virtual size: 110KB

.rsrc
Size: 1KB - Virtual size: 1KB