01b6651ba9cc2dfc8185a743a1005049_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

01b6651ba9cc2dfc8185a743a1005049_JaffaCakes118
Size

190KB
MD5

01b6651ba9cc2dfc8185a743a1005049
SHA1

9f3e04489f15998b3c3aa9531ff97ab02284979d
SHA256

7136a1e02cf6166a7ee9e674d9e8673ce3a22e698c4da359c21baa8e82484e4f
SHA512

2e663b049c9bc3dbae055c590044c379ce01a7b2a719435c2ba008fa3a9e3faa1af1a47a2e90268afdad73f7a2506fe80024b99b664aae1034f0ca0a4aa7fb3f
SSDEEP

3072:QAvp/kF5DzcFYgqrGUX69qQvovAZEdGsiSU/VF7nWuMEaY5HzHJ1S9DYzLian:XR/kjzc7flvoviEdG1FKupj5XgD3U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01b6651ba9cc2dfc8185a743a1005049_JaffaCakes118

Files

01b6651ba9cc2dfc8185a743a1005049_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aceb59d6ea0573309ee85de96416f9cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Life\Ball\Box\Flower.exe

Imports

kernel32

GetFileSize
EnumResourceTypesA
ClearCommBreak
GlobalAlloc
UnlockFile
ReadFile
HeapCreate
SearchPathA

user32

RegisterClassA
GetKeyboardType
PostMessageW
TranslateMessage
DlgDirSelectComboBoxExA
GetDlgItemInt
GetKeyboardLayoutList
WindowFromPoint
SetCursor
MonitorFromPoint
GetMenuItemRect
CharNextW
SetScrollInfo
CreateWindowExA
GetSystemMetrics
LookupIconIdFromDirectory
AttachThreadInput
GetKeyState
IsCharAlphaA
SendNotifyMessageW
ArrangeIconicWindows
GetActiveWindow
GrayStringW
IsCharAlphaW

gdi32

SetWindowExtEx
CreateFontIndirectA
GetTextExtentExPointW
TextOutW
CreateRectRgnIndirect
CreateFontIndirectW
DPtoLP
SaveDC
SetDIBits
GetStockObject

atl

AtlAxCreateControl
AtlAxCreateControlEx

shlwapi

PathFileExistsW

Exports

Exports

_FfgdjhjfghghjlkfUJfkjfdjkgjkfjkgfJfkd@0
_GetClassInfoAGetClassInfoAGetClassInfoAGetClassInfoA@0

Sections

.dedrde
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vggh
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wqew
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ereffv
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdgdfs
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aceb59d6ea0573309ee85de96416f9cb

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

atl

shlwapi

Exports

Exports

Sections

.dedrde Size: 1KB - Virtual size: 1KB

.text Size: 137KB - Virtual size: 136KB

.vggh Size: 512B - Virtual size: 64B

.wqew Size: 512B - Virtual size: 171B

.ereffv Size: 512B - Virtual size: 64B

.fdgdfs Size: 512B - Virtual size: 64B

.data Size: 26KB - Virtual size: 25KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 2KB - Virtual size: 1KB

.dedrde
Size: 1KB - Virtual size: 1KB

.text
Size: 137KB - Virtual size: 136KB

.vggh
Size: 512B - Virtual size: 64B

.wqew
Size: 512B - Virtual size: 171B

.ereffv
Size: 512B - Virtual size: 64B

.fdgdfs
Size: 512B - Virtual size: 64B

.data
Size: 26KB - Virtual size: 25KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 2KB - Virtual size: 1KB