0163fa23c5ba7efe3829006a2e5ab7f8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0163fa23c5ba7efe3829006a2e5ab7f8_JaffaCakes118
Size

997KB
MD5

0163fa23c5ba7efe3829006a2e5ab7f8
SHA1

19f008c75ef39e4a28740c539bdd70791ecfae9d
SHA256

90262cd45cc037beeb586e869268ebaa9d66b0eb3fe111386157a7022e12f5e0
SHA512

4309dcc622404d1e261812695f54771398eecda74f47e80f1d1dbb434c28734d998f73cdfad2a6be89dcc4a2a55474f2f2e7c0d9c745dbd684b63a701c995212
SSDEEP

24576:bFov7S2S1FJNZjTdcBxXU+Iir2DdcGBUYlclIDDNM/0A:bFkS1dFdatr2DdlWYalRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0163fa23c5ba7efe3829006a2e5ab7f8_JaffaCakes118

Files

0163fa23c5ba7efe3829006a2e5ab7f8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f51a70ae1b5310d46d7a73d476f4c04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

kernel32

GetProcAddress
VirtualAlloc
HeapAlloc
HeapFree
HeapSize
GetCurrentProcess
ExitProcess
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetCurrentThreadId
GetLastError
FindClose
GetSystemTimeAsFileTime
GetSystemInfo
FormatMessageW
lstrcmpiW
GetModuleFileNameW
GetStartupInfoW
FindFirstFileW
IsValidCodePage
GetUserDefaultLCID
GetModuleHandleW

uxtheme

CloseThemeData
IsAppThemed
GetThemeColor
DrawThemeParentBackground

wintrust

CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CryptCATAdminAcquireContext
WinVerifyTrust

msvcrt

__p__fmode
__set_app_type
_except_handler3
__setusermatherr
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__p__commode
_adjust_fdiv
_controlfp

mpr

WNetGetConnectionW

ole32

CLSIDFromProgID
CLSIDFromString

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.02e4
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.h5rv0
Size: 753KB - Virtual size: 753KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f51a70ae1b5310d46d7a73d476f4c04

Headers

File Characteristics

Imports

comdlg32

kernel32

uxtheme

wintrust

msvcrt

mpr

ole32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 6.9MB

.02e4 Size: 100KB - Virtual size: 100KB

.h5rv0 Size: 753KB - Virtual size: 753KB

.rsrc Size: 114KB - Virtual size: 113KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 6.9MB

.02e4
Size: 100KB - Virtual size: 100KB

.h5rv0
Size: 753KB - Virtual size: 753KB

.rsrc
Size: 114KB - Virtual size: 113KB