171851f494454c4703e84ba32c32f76a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

171851f494454c4703e84ba32c32f76a_JaffaCakes118
Size

248KB
MD5

171851f494454c4703e84ba32c32f76a
SHA1

a09310d5a0cd9c8b44fb04130be49b0f32b0ca09
SHA256

c6b8e8b4f828f6c053646f43b752d9c1305ccac6eedfed6e55487fd17462a89f
SHA512

f14f9d608ff014d03a52d86d8a77d92a54d746fce1fd3fde9cbb54739087866a612ca5d051da932107967a08a77bb881481b75ea7a38b8ba2dabfd96fae9156c
SSDEEP

3072:kRBSxyYJjByx8QOMK97nOwmcNUYTumYYagOf6vi+im3ev8l1g:OuhjEJwmcVTunYaZ6niGh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171851f494454c4703e84ba32c32f76a_JaffaCakes118

Files

171851f494454c4703e84ba32c32f76a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1bf99bb58f945f99a9dfd1b09195dd8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocStringLen
VariantCopyInd
SysReAllocStringLen
SysStringLen
GetErrorInfo
OleLoadPicture
SafeArrayPtrOfIndex
SafeArrayUnaccessData

kernel32

IsBadReadPtr
WaitForSingleObject
SetLastError
HeapFree
InitializeCriticalSection
GetEnvironmentStrings
VirtualAlloc
GetDiskFreeSpaceA
SetErrorMode
FindClose
SetThreadLocale
GetModuleHandleW
GetSystemDefaultLangID
DeleteFileA
lstrcmpA
LockResource
GetLocalTime
SetEvent
CompareStringA
lstrlenW
HeapAlloc
GetDateFormatA
MoveFileExA
GetProcAddress
lstrcpynA
GetCommandLineA
LoadLibraryA
IsBadHugeReadPtr
LoadLibraryExA
GetTickCount
FormatMessageA
GetProcessHeap
GetModuleHandleA
GetCPInfo
ExitProcess
SetFilePointer
ExitThread
LocalFree
lstrcatA
GetLocaleInfoA
GlobalDeleteAtom
GetCommandLineW
LocalAlloc
FindResourceA
LocalReAlloc
lstrcmpiA
GetOEMCP
EnumCalendarInfoA
GetFullPathNameA
GetFileSize
GetModuleFileNameA
GlobalAddAtomA
GetACP

comctl32

ImageList_Destroy
ImageList_Remove
ImageList_Add
ImageList_Create
ImageList_Draw
ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_Write

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 751B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bdata
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bf99bb58f945f99a9dfd1b09195dd8b

Headers

File Characteristics

Imports

oleaut32

kernel32

comctl32

Sections

.text Size: 84KB - Virtual size: 83KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 751B

BSS Size: 4KB - Virtual size: 1KB

.bdata Size: 132KB - Virtual size: 130KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 84KB - Virtual size: 83KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 751B

BSS
Size: 4KB - Virtual size: 1KB

.bdata
Size: 132KB - Virtual size: 130KB

.rsrc
Size: 8KB - Virtual size: 7KB