14724468dcd3787b7d8c1120c172d19c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

14724468dcd3787b7d8c1120c172d19c_JaffaCakes118
Size

77KB
MD5

14724468dcd3787b7d8c1120c172d19c
SHA1

5442101005007d7081a5dbff5cb21351b46d7227
SHA256

ee2fb614a97d71c0dfb0730c146e7d4b757e4f665cf116f92509eb9096dba0e3
SHA512

44cf55c1f3973e017694e0924cc0224e56fec50045b98056cacd8ea486871f1ba713b580ed83407248ed4395be07d33a86b0364089a6a4382fff5246e96111d7
SSDEEP

1536:ykruyohNGidPT6pDQu0+Ga2/xnWQuwLYVnrcY5n2TviQdgrsfroTEKZ:ykrzouiVTMkwyZ9uCUfl06FXEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14724468dcd3787b7d8c1120c172d19c_JaffaCakes118

Files

14724468dcd3787b7d8c1120c172d19c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4add477bc1e84e500caec928862eb399

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
GetDateFormatA
lstrlenA
VirtualAllocEx
GetCurrentThreadId
LoadLibraryA
GetThreadLocale
ExitProcess

comctl32

ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Read
ImageList_Draw
ImageList_DrawEx
ImageList_Add
ImageList_Create

user32

GetMenu
SetClipboardData
IsDlgButtonChecked
SetFocus
SetMenu
GetWindow
SetForegroundWindow

gdi32

CreatePalette
CreateCompatibleBitmap
GetTextColor

Exports

Exports

_TM0pCta@16
_veG0QUatL@16
qq7Z4X4aTYI@20
4AQgOq@12
_FV7NNKVi@20
akfBi6Lm
_xpWnoMc2aVE49@12
cO5OtVFd
_kqaZxmum
YyWiUrWt
_WX5lmlb
_PWn1Liu0
KbZBIf_
I7i2tuJlt@4
_bshkm8ZTHAI5@20
XCTvHVoMBqZ
93VytYzrIfCbh
_2FKDSYLt0fv2K
_H0RK5VCu3KAx
_6iDAnf@20
_fGLAnS@4
_IpcHzIF8IHi@4
_vcYCSF
z4bfbeo
WJpefxVt7RYLz@16
_8Da_YwmuyuP_d@16
Ch9VA2BcF@16
_mOzjH
_x8TuDF9BUQWs
_gUEZihZ8g
_ngbnW0t@24
AEDwrcwdw
_CtRvGxBUmR@16
_Ct5QSTMV3BSEo@4
0_IUiT1Y6@16
_4Ig0uQ4CryR2P
_Hbwwlx@20
75vqQ@24
FR82tB@4
_QnkXc0J3KkOn2
jKcdgvnI1w
c5me41d@16
_WVpSO74kXA
_3uo_sAvY1
kR4LjQE4hpEN15
x1K6128
EFegh7mJlk
_XvWL2WpSeZEcJ@16
_E7hSW@4
pd7m5yqTAxC2br

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 865B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4add477bc1e84e500caec928862eb399

Headers

File Characteristics

Imports

kernel32

comctl32

user32

gdi32

Exports

Exports

Sections

CODE Size: 15KB - Virtual size: 14KB

.data Size: 9KB - Virtual size: 9KB

.ihdata Size: 48KB - Virtual size: 48KB

.idata Size: 1024B - Virtual size: 865B

.thdata Size: 512B - Virtual size: 436B

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 15KB - Virtual size: 14KB

.data
Size: 9KB - Virtual size: 9KB

.ihdata
Size: 48KB - Virtual size: 48KB

.idata
Size: 1024B - Virtual size: 865B

.thdata
Size: 512B - Virtual size: 436B

.rsrc
Size: 1KB - Virtual size: 1KB