2588311e734fac9bce4414c0cddc52c3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2588311e734fac9bce4414c0cddc52c3_JaffaCakes118
Size

300KB
MD5

2588311e734fac9bce4414c0cddc52c3
SHA1

05c0ee4b1ec86152f714309a9e002bc4c9804952
SHA256

02321bc1bb3cfa3f8cde06798927186ae455886dc76f254e013a246cce19ad77
SHA512

df3833b6118c6769939ebcdcbab873a9d5a595535de8a09306db46970ada989404d2746281c49a3a51fb263b93adc5d2e5f1981544e3a4fe4899456a8e467edd
SSDEEP

6144:KRPAKEgJWXmAMDO9rOOYELJ9GH6UQprOeY7G9zKHwJu5o4NHPo:CA1gJM8C9FYELJ94QpGG9eQUXNHw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2588311e734fac9bce4414c0cddc52c3_JaffaCakes118

Files

2588311e734fac9bce4414c0cddc52c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

085300b3da24e99d896def59c033b4a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ReleaseCapture
OffsetRect
MapWindowPoints
SendMessageA
PtInRect
MessageBeep
RegisterClassA
LoadStringA
ScreenToClient
RegisterClipboardFormatA
RegisterWindowMessageA
PostQuitMessage
LoadIconA
LoadBitmapA
OpenClipboard
LoadCursorA
RedrawWindow
SendMessageW
PeekMessageW
ReleaseDC
RemovePropA
MapVirtualKeyA
LoadKeyboardLayoutA
OemToCharA
SetActiveWindow
ScrollWindow
RemoveMenu
MessageBoxA
PeekMessageA
PostMessageA

kernel32

GetProcAddress
VirtualAlloc
GetModuleHandleA
LoadLibraryExA
GetOEMCP
ExitThread
VirtualAllocEx
lstrlenA
GetCommandLineA
GetCommandLineW
ExitProcess
GetModuleHandleW
IsBadHugeReadPtr

oleaut32

SafeArrayGetUBound
SafeArrayCreate
VariantCopyInd
VariantChangeType
SafeArrayGetElement

comctl32

ImageList_DragShowNolock
ImageList_Add
ImageList_GetBkColor
ImageList_Write
ImageList_Draw
ImageList_Destroy
ImageList_Remove
ImageList_DrawEx
ImageList_Read
ImageList_Create

gdi32

GetRgnBox
CreateBitmap
GetBitmapBits
BitBlt
RestoreDC
GetObjectA

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
ChooseColorA

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 512B - Virtual size: 215B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

085300b3da24e99d896def59c033b4a3

Headers

File Characteristics

Imports

user32

kernel32

oleaut32

comctl32

gdi32

comdlg32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 228KB - Virtual size: 228KB

.fdata Size: 512B - Virtual size: 215B

DATA Size: 8KB - Virtual size: 8KB

.hdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 836B

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 228KB - Virtual size: 228KB

.fdata
Size: 512B - Virtual size: 215B

DATA
Size: 8KB - Virtual size: 8KB

.hdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 836B