18263fcf926a2de3b34ef4145e84f416_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

18263fcf926a2de3b34ef4145e84f416_JaffaCakes118
Size

75KB
MD5

18263fcf926a2de3b34ef4145e84f416
SHA1

e5b5a174e4882238c67ab631664c7281fd90d3ac
SHA256

b62560b85ae369a837c24987b8fdc67278ef3f795497078eca5c1a11b53b3098
SHA512

a1761e1ae3989ed01b79b764f6c2759bbd22d4c9fbbf7dc93db9089e48e59c8a808c435da8e7c6dc056e6817df04bd830caea296dcf0ecf42fe5ab52cc370a61
SSDEEP

1536:ykruyohNGidPT6p3Qu0+Ga2/xnWQuwLYVnrcY5n2TviQdgrsfroTEKx:ykrzouiVTMYwyZ9uCUfl06FXEm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18263fcf926a2de3b34ef4145e84f416_JaffaCakes118

Files

18263fcf926a2de3b34ef4145e84f416_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4add477bc1e84e500caec928862eb399

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
GetDateFormatA
lstrlenA
VirtualAllocEx
GetCurrentThreadId
LoadLibraryA
GetThreadLocale
ExitProcess

comctl32

ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Read
ImageList_Draw
ImageList_DrawEx
ImageList_Add
ImageList_Create

user32

GetMenu
SetClipboardData
IsDlgButtonChecked
SetFocus
SetMenu
GetWindow
SetForegroundWindow

gdi32

CreatePalette
CreateCompatibleBitmap
GetTextColor

Exports

Exports

_TM0pCta@16
_veG0QUatL@16
qq7Z4X4aTYI@20
4AQgOq@12
_FV7NNKVi@20
akfBi6Lm
_xpWnoMc2aVE49@12
cO5OtVFd
_kqaZxmum
YyWiUrWt
_WX5lmlb
_PWn1Liu0
KbZBIf_
I7i2tuJlt@4
_bshkm8ZTHAI5@20
XCTvHVoMBqZ
93VytYzrIfCbh
_2FKDSYLt0fv2K
_H0RK5VCu3KAx
_6iDAnf@20
_fGLAnS@4
_IpcHzIF8IHi@4
_vcYCSF
z4bfbeo
WJpefxVt7RYLz@16
_8Da_YwmuyuP_d@16
Ch9VA2BcF@16
_mOzjH
_x8TuDF9BUQWs
_gUEZihZ8g
_ngbnW0t@24
AEDwrcwdw
_CtRvGxBUmR@16
_Ct5QSTMV3BSEo@4
0_IUiT1Y6@16
_4Ig0uQ4CryR2P
_Hbwwlx@20
75vqQ@24
FR82tB@4
_QnkXc0J3KkOn2
jKcdgvnI1w
c5me41d@16
_WVpSO74kXA
_3uo_sAvY1
kR4LjQE4hpEN15
x1K6128
EFegh7mJlk
_XvWL2WpSeZEcJ@16
_E7hSW@4
pd7m5yqTAxC2br

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 865B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4add477bc1e84e500caec928862eb399

Headers

File Characteristics

Imports

kernel32

comctl32

user32

gdi32

Exports

Exports

Sections

CODE Size: 15KB - Virtual size: 14KB

.data Size: 9KB - Virtual size: 9KB

.ihdata Size: 48KB - Virtual size: 48KB

.idata Size: 1024B - Virtual size: 865B

.thdata Size: 512B - Virtual size: 436B

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 15KB - Virtual size: 14KB

.data
Size: 9KB - Virtual size: 9KB

.ihdata
Size: 48KB - Virtual size: 48KB

.idata
Size: 1024B - Virtual size: 865B

.thdata
Size: 512B - Virtual size: 436B

.rsrc
Size: 1KB - Virtual size: 1KB