0b256f80316f16d4e30635e749af222d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0b256f80316f16d4e30635e749af222d_JaffaCakes118
Size

180KB
MD5

0b256f80316f16d4e30635e749af222d
SHA1

6d4fbd9cda2797e713e433769b7483d8a498ed25
SHA256

e9398a3bb90aa90f0aae932348d2c2d3bbf275f453f038c2994a497203f58726
SHA512

cc836983b5a964a1d08460b22a481e68a72b5941cab80ef8bdb6a3e78b54e6050b0fad905076b10a36a2b465aabd53042e22dbeb19b57afc59b8646ff54efe61
SSDEEP

3072:aRtKB/oTJCz9FoEV6YqbL6uc0jil+/bO/PvYCcW64x1pMUcwa6i/ZHfxbJZ5:WtK1oTEFoga6ucR2bOPMW6B7UsNxbJP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b256f80316f16d4e30635e749af222d_JaffaCakes118

Files

0b256f80316f16d4e30635e749af222d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4c2659c60a42fc94b6d7f0ae05a1b71d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\FormView\Font\Word.exe

Imports

user32

VkKeyScanA

kernel32

LoadLibraryA

Exports

Exports

?RestrictReason##YGPAXU_FILETIME###Z
?SeasonProgress@@YGPAXU_FILETIME@@@Z

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dinit
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cinit
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sinit
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cinit
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ginit
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jinit
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tinit
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pinit
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c2659c60a42fc94b6d7f0ae05a1b71d

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 25KB

.dinit Size: 512B - Virtual size: 28B

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 201KB

.init Size: 512B - Virtual size: 181B

.cinit Size: 512B - Virtual size: 76B

.sinit Size: 1024B - Virtual size: 732B

.cinit Size: 14KB - Virtual size: 14KB

.ginit Size: 29KB - Virtual size: 28KB

.reloc Size: 1KB - Virtual size: 1KB

.jinit Size: 29KB - Virtual size: 28KB

.tinit Size: 29KB - Virtual size: 28KB

.pinit Size: 43KB - Virtual size: 43KB

.text
Size: 26KB - Virtual size: 25KB

.dinit
Size: 512B - Virtual size: 28B

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 201KB

.init
Size: 512B - Virtual size: 181B

.cinit
Size: 512B - Virtual size: 76B

.sinit
Size: 1024B - Virtual size: 732B

.cinit
Size: 14KB - Virtual size: 14KB

.ginit
Size: 29KB - Virtual size: 28KB

.reloc
Size: 1KB - Virtual size: 1KB

.jinit
Size: 29KB - Virtual size: 28KB

.tinit
Size: 29KB - Virtual size: 28KB

.pinit
Size: 43KB - Virtual size: 43KB