0fa961197d3849577ad7157e65681f53_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0fa961197d3849577ad7157e65681f53_JaffaCakes118
Size

77KB
MD5

0fa961197d3849577ad7157e65681f53
SHA1

6fff62b5713b2e7478a28bcdc55e63030d6b0084
SHA256

b5a1e2f19d5100907880f87702a4e596b8d8e0c372fef368c4db5ea136b02d97
SHA512

4b13ba230749c90b073241ce4587be1ad4dee1cf3bb68c96146dad80806602ccf5479afb37688e31ef3c73e094a25b076bd6590777c8a0552d4b6f93f0ab853a
SSDEEP

1536:ykruyohNGidPT6pmQu0+Ga2/xnWQuwLYVnrcY5n2TviQdgrsfroTEKZ:ykrzouiVTMzwyZ9uCUfl06FXEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fa961197d3849577ad7157e65681f53_JaffaCakes118

Files

0fa961197d3849577ad7157e65681f53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4add477bc1e84e500caec928862eb399

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
GetDateFormatA
lstrlenA
VirtualAllocEx
GetCurrentThreadId
LoadLibraryA
GetThreadLocale
ExitProcess

comctl32

ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Read
ImageList_Draw
ImageList_DrawEx
ImageList_Add
ImageList_Create

user32

GetMenu
SetClipboardData
IsDlgButtonChecked
SetFocus
SetMenu
GetWindow
SetForegroundWindow

gdi32

CreatePalette
CreateCompatibleBitmap
GetTextColor

Exports

Exports

_TM0pCta@16
_veG0QUatL@16
qq7Z4X4aTYI@20
4AQgOq@12
_FV7NNKVi@20
akfBi6Lm
_xpWnoMc2aVE49@12
cO5OtVFd
_kqaZxmum
YyWiUrWt
_WX5lmlb
_PWn1Liu0
KbZBIf_
I7i2tuJlt@4
_bshkm8ZTHAI5@20
XCTvHVoMBqZ
93VytYzrIfCbh
_2FKDSYLt0fv2K
_H0RK5VCu3KAx
_6iDAnf@20
_fGLAnS@4
_IpcHzIF8IHi@4
_vcYCSF
z4bfbeo
WJpefxVt7RYLz@16
_8Da_YwmuyuP_d@16
Ch9VA2BcF@16
_mOzjH
_x8TuDF9BUQWs
_gUEZihZ8g
_ngbnW0t@24
AEDwrcwdw
_CtRvGxBUmR@16
_Ct5QSTMV3BSEo@4
0_IUiT1Y6@16
_4Ig0uQ4CryR2P
_Hbwwlx@20
75vqQ@24
FR82tB@4
_QnkXc0J3KkOn2
jKcdgvnI1w
c5me41d@16
_WVpSO74kXA
_3uo_sAvY1
kR4LjQE4hpEN15
x1K6128
EFegh7mJlk
_XvWL2WpSeZEcJ@16
_E7hSW@4
pd7m5yqTAxC2br

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 865B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4add477bc1e84e500caec928862eb399

Headers

File Characteristics

Imports

kernel32

comctl32

user32

gdi32

Exports

Exports

Sections

CODE Size: 15KB - Virtual size: 14KB

.data Size: 9KB - Virtual size: 9KB

.ihdata Size: 48KB - Virtual size: 48KB

.idata Size: 1024B - Virtual size: 865B

.thdata Size: 512B - Virtual size: 436B

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 15KB - Virtual size: 14KB

.data
Size: 9KB - Virtual size: 9KB

.ihdata
Size: 48KB - Virtual size: 48KB

.idata
Size: 1024B - Virtual size: 865B

.thdata
Size: 512B - Virtual size: 436B

.rsrc
Size: 1KB - Virtual size: 1KB