2976a90abb16c8c39223fe38b6b2d6b0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2976a90abb16c8c39223fe38b6b2d6b0_JaffaCakes118
Size

61KB
MD5

2976a90abb16c8c39223fe38b6b2d6b0
SHA1

bd9072decfa9be7a8f268cafa97cbfead68b2e50
SHA256

612f616ce4b5b5032916ec71704f9cceef5a709920fd2e93b59d2602497ae2ca
SHA512

254ac62121ae357c668c4ea4042d32c54044631534c6541d6f9b8f846e858eb1856b308b9d75a35714f68c23d06228c7a9a963b6b0c09824b26740b59b44abe4
SSDEEP

1536:DoaKKPd8tqA7xsSY+A37feaCMJDmYsLIb4PvYqHB/AdGX:DiKPd8QA7OSDADeak7dJHB/AdGX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2976a90abb16c8c39223fe38b6b2d6b0_JaffaCakes118

Files

2976a90abb16c8c39223fe38b6b2d6b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8dccbe8dc9443212799c93af047d0049

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CreateProcessA
ExitProcess
FlushFileBuffers
GetCommandLineA
GetEnvironmentStringsA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetSystemInfo
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
WaitForSingleObject
WriteFile
GetCurrentProcessId
GetModuleFileNameA
GetProcAddress
GetShortPathNameA
LoadLibraryA
OpenProcess
TerminateProcess

oleaut32

SysAllocStringByteLen
SysFreeString
SysStringByteLen

user32

ClientToScreen
CreateDialogIndirectParamA
CreateDialogParamA
CreateMenu
CreatePopupMenu
CreateWindowExA
DeleteMenu
DestroyWindow
DialogBoxIndirectParamA
DispatchMessageA
DrawMenuBar
EnableWindow
EndDialog
GetClientRect
GetDialogBaseUnits
GetDlgItem
GetMenu
GetMenuItemInfoA
GetWindowLongA
GetWindowRect
GetWindowTextA
InsertMenuItemA
IsDialogMessageA
IsWindow
LoadImageA
MapDialogRect
MessageBeep
MessageBoxA
PeekMessageA
PostQuitMessage
ScreenToClient
SendMessageA
SetCursor
SetFocus
SetMenu
SetMenuItemInfoA
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TrackPopupMenu
TranslateMessage
CharUpperBuffA
DialogBoxParamA
LoadIconA

gdi32

MoveToEx

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rloc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8dccbe8dc9443212799c93af047d0049

Headers

File Characteristics

Imports

advapi32

kernel32

oleaut32

user32

gdi32

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 1024B - Virtual size: 1KB

.link Size: 2KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.rloc Size: 39KB - Virtual size: 38KB

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 1024B - Virtual size: 1KB

.link
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.rloc
Size: 39KB - Virtual size: 38KB