00bca1f12aaa4c80b3db8701aa3ac531_JaffaCakes118

General

Target

00bca1f12aaa4c80b3db8701aa3ac531_JaffaCakes118
Size

104KB
MD5

00bca1f12aaa4c80b3db8701aa3ac531
SHA1

5e51e2babb4c99f1ca45bf0781d704fb6f93e7e0
SHA256

cca8e7706eed8a4f4dc107939704a7c8fd8a09488544ceed284adcbf290a225a
SHA512

8058ab6b2ba90110f1785c6ba7b570409aa0893691217a6a61831d0f0f2ce3b9efb46bd7f641f2623efd75bec51c9c8a037961a7ec22d6770544a4ae15f5f7f1
SSDEEP

1536:1ILocpBjnVHdWAB5fftkE5jsbJqX/Olw/oQCiCWdHzJSN/Jlk7zCgfVu9rshANPo:eLN95dWu5ffH5jsbcX/WCl+Eux5pfo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00bca1f12aaa4c80b3db8701aa3ac531_JaffaCakes118

Files

00bca1f12aaa4c80b3db8701aa3ac531_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f790020acb52bb606755a4f63f3233b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\FirmWork\Studio\Common\Bin.exe

Imports

user32

IsCharAlphaW
GetMessageTime
GetKeyState
GetQueueStatus

kernel32

GetProcessHeap

Exports

Exports

?FancyBack@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?OptimusIO@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?OptionWindowGear@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?RegardSeven@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?RightApocoloptus@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SecureCheck@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SignSetupUp@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SmeltIron@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?StrongFontW@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?TaleRevert@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iat
Size: 1024B - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data1
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f790020acb52bb606755a4f63f3233b2

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 79KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.iat Size: 1024B - Virtual size: 118KB

.reloc Size: 2KB - Virtual size: 1KB

.data1 Size: 14KB - Virtual size: 14KB

.tls Size: 512B - Virtual size: 512B

.text
Size: 80KB - Virtual size: 79KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.iat
Size: 1024B - Virtual size: 118KB

.reloc
Size: 2KB - Virtual size: 1KB

.data1
Size: 14KB - Virtual size: 14KB

.tls
Size: 512B - Virtual size: 512B