2da0383748213e9323867bfeba948143_JaffaCakes118

General

Target

2da0383748213e9323867bfeba948143_JaffaCakes118
Size

77KB
MD5

2da0383748213e9323867bfeba948143
SHA1

f7d96deb409e0e14c8f520264864a66de5650910
SHA256

1aa234dbfae2e66eb122c36cb2cc2e85e8ce457f0a3026fc267701f261a03033
SHA512

3723805abe2ee32a3db7d88370fb881d21455dd5881e7369cc110183ee3016300404ff30abd708aa2dda15e5bfab391017e3366772d69390ebaf03c1f82b8d7f
SSDEEP

1536:dZj242c4f8dJ1kiCXlTug/X8FaCaKaG//ZaGD5:dZj242/f2LkiCXl5/MMzu//ZaGD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2da0383748213e9323867bfeba948143_JaffaCakes118

Files

2da0383748213e9323867bfeba948143_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3443450a10d6d557144798ae521a009f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
GetWindowTextA
DefWindowProcA
SetTimer
KillTimer
PostQuitMessage
FindWindowA
GetWindowThreadProcessId
EnumWindows
SendMessageA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetModuleFileNameA
UnhandledExceptionFilter
ReadFile
SetEndOfFile
SetFilePointer
LoadLibraryA
GetProcAddress
CreateFileA
FlushFileBuffers
SetStdHandle
VirtualAlloc
HeapAlloc
WriteFile
VirtualFree
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetStdHandle
HeapDestroy
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 943B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3443450a10d6d557144798ae521a009f

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 1024B - Virtual size: 943B

.data Size: 5KB - Virtual size: 9KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 50KB - Virtual size: 49KB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 1024B - Virtual size: 943B

.data
Size: 5KB - Virtual size: 9KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 50KB - Virtual size: 49KB