2e051043f439336ade46b2c0be76b0e0_JaffaCakes118

General

Target

2e051043f439336ade46b2c0be76b0e0_JaffaCakes118
Size

336KB
MD5

2e051043f439336ade46b2c0be76b0e0
SHA1

0bb62328b141d78bde1b0878323f95353f206a87
SHA256

ce0f3aaf4c5352de1907c05c3401eb784db20dec558c31e88e35ea3d1819b5ac
SHA512

1e79339d4ccfe0c71fd4500f31a7016b34f4cdd903db86aa242299dc3b189a3d03a8c8bf132a0ebe8efd4b720530460855f0b231bd0a418367d8183f9585d62c
SSDEEP

6144:fwKopgEaGunFYR1TnErquw56vj5qA74Z0H2XkFV5+x2vdE0aoDTgmUbl:fwKuTavFYzo+ajd7S0H2XkZQ2vHEmS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e051043f439336ade46b2c0be76b0e0_JaffaCakes118

Files

2e051043f439336ade46b2c0be76b0e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

686c73f951f90404d2cc8cf73ff18f28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
ExitThread
FindResourceA
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
HeapFree
InterlockedIncrement
LoadLibraryA
LocalAlloc
MultiByteToWideChar
QueryPerformanceCounter
SetEnvironmentVariableA
SetUnhandledExceptionFilter
TlsFree
VirtualAlloc
VirtualProtect
lstrcmpA

msvcrt

fopen
fseek
fwrite
strcmp
atol
swprintf
wcschr
atof
sscanf
strlen

user32

TrackPopupMenu
SetWindowPos
SetScrollInfo
ScreenToClient
MoveWindow
LoadIconA
GetSysColorBrush
GetMenu
DispatchMessageA
CreateMenu

comctl32

InitCommonControls
CreateStatusWindowA

oleaut32

VarUI2FromCy
VarR8FromUI4
VarR8FromR4
VarR4FromUI2
VarI4FromUI1
VarI2FromI4
VarI2FromDec
VarI1FromCy
VarCySu
VarBoolFromI1

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

686c73f951f90404d2cc8cf73ff18f28

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

comctl32

oleaut32

Sections

.text Size: 120KB - Virtual size: 120KB

.rdata Size: 119KB - Virtual size: 120KB

.data Size: 77KB - Virtual size: 80KB

.rsrc Size: 19KB - Virtual size: 20KB

.text
Size: 120KB - Virtual size: 120KB

.rdata
Size: 119KB - Virtual size: 120KB

.data
Size: 77KB - Virtual size: 80KB

.rsrc
Size: 19KB - Virtual size: 20KB