000457711e9e1fcd3d8f64ecf5d91169_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

000457711e9e1fcd3d8f64ecf5d91169_JaffaCakes118
Size

74KB
MD5

000457711e9e1fcd3d8f64ecf5d91169
SHA1

57c2c46a3e6040cf58bbdd6734ff8e72db412142
SHA256

6909b371064c90167ab0d4fa90dbc596e355b727d69ca7e700d468fd1c3e897b
SHA512

c600bf7794d0f8b4edd222afbd4fc64bba3b0efd9c5dfd9667ac9100460b2826c18f3c68f5e5cf4537341d2ec46c34de35e57c8614c4a86af089d85202cd9b0e
SSDEEP

768:QrXdL1gBpog8HNt+OduLhsFadiwPzTFjCytgmwzNgc/0QgjngJUMSQL0oS:oNLipogkNQmGgGTFjTwzNhDgbGUMSQNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000457711e9e1fcd3d8f64ecf5d91169_JaffaCakes118

Files

000457711e9e1fcd3d8f64ecf5d91169_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54a32a2449aa016aeb1bb07edf7268ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

EqualSid

user32

MessageBoxA
DestroyMenu
ShowWindow
DispatchMessageA
SendDlgItemMessageA
EnableWindow
SetActiveWindow
DestroyWindow
PostQuitMessage
SendMessageA
DefWindowProcA
CreateDialogParamA
GetCursorPos
PostMessageA
TrackPopupMenu
GetDlgItemTextA
EndDialog
MessageBeep
SetForegroundWindow
SetWindowPos
SetDlgItemTextA
DialogBoxParamA
FindWindowA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
DestroyIcon
CreatePopupMenu
AppendMenuA
TranslateMessage
GetMessageA

gdi32

GetStockObject

comdlg32

GetOpenFileNameA

shell32

Shell_NotifyIconA

kernel32

LocalFree
GetCurrentProcessId
CloseHandle
OpenProcess
CreateFileA
SetStdHandle
RtlUnwind
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
GetFileType
SetHandleCount
SetFilePointer
ReadFile
GetLastError
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
SetEndOfFile
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
UnmapViewOfFile
MapViewOfFile
HeapAlloc
HeapFree
GetStdHandle
OpenFileMappingA
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

54a32a2449aa016aeb1bb07edf7268ac

Headers

File Characteristics

Imports

advapi32

user32

gdi32

comdlg32

shell32

kernel32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 11KB - Virtual size: 17KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 11KB - Virtual size: 17KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 10KB - Virtual size: 9KB