1421a75131250c7494546a015906388c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1421a75131250c7494546a015906388c_JaffaCakes118
Size

100KB
MD5

1421a75131250c7494546a015906388c
SHA1

3a4cc8268e3545bdfe4c91380d5eb948b0bb948f
SHA256

b3ec87064bdc2089ebcc97fd4d69fa1a652901e8b936ac3a38e1d5b9f2ed220b
SHA512

3a542c07fd4befc4caa2cb138ca49d99918b1a725fe210bb143f08694dd70b425260371c8ca9afe25d4da21020fcf9c09d2584e678d3246eb60c8a114628c70d
SSDEEP

1536:WjSAhTmevq1C+FC0LoHC83yziOboKsVMItkEJ5oR3GqdMpvQME843w:0hhhvCC+NMCViqoTjJ5+3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1421a75131250c7494546a015906388c_JaffaCakes118

Files

1421a75131250c7494546a015906388c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2f26ff31355b25803280537c9c6accd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetModuleFileNameA
WinExec
lstrcpynA
CreateProcessA
lstrcpyA
lstrlenA
Sleep
LoadLibraryA
GetVersion
GetCommandLineA
CloseHandle
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
GetLastError
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetProcAddress
FreeLibrary
ExitProcess
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetModuleHandleA
GetStartupInfoA
UnhandledExceptionFilter
HeapSize
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess

user32

EnableMenuItem
CheckMenuItem
InsertMenuA
CreateMenu
AppendMenuA
LoadStringA
DestroyMenu
DeleteMenu
GetMenuItemCount
KillTimer
SetTimer
DestroyIcon
LoadMenuA
SendMessageA
PostQuitMessage
DefWindowProcA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PostMessageA
FindWindowA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
DispatchMessageA
TranslateMessage
MessageBoxA
GetSubMenu

gdi32

GetStockObject

advapi32

RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
CloseServiceHandle
OpenSCManagerA
RegCloseKey

shell32

Shell_NotifyIconA

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ani
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b2f26ff31355b25803280537c9c6accd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 12KB - Virtual size: 12KB

.ani Size: 28KB - Virtual size: 28KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 12KB - Virtual size: 12KB

.ani
Size: 28KB - Virtual size: 28KB