3945cf502363ac64b09d5d951d1e13c6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3945cf502363ac64b09d5d951d1e13c6_JaffaCakes118
Size

116KB
MD5

3945cf502363ac64b09d5d951d1e13c6
SHA1

1a843ad79398008bd4671345eb1f0afca7d3d342
SHA256

6993f41f13f1c2c5f3172a8d0e358bbaa2cb9255b68680a8f54c2b4f7e784ac2
SHA512

75b2d899c01159f74f07a2b235f15979b76f74a61b125c5d6a195d32e4167e9c17f3cf975801f6481adff99e502a5f66c569d9cbc0ab36a40a1ab0cab18b75e4
SSDEEP

3072:98RTVXDNJqxSA5HDc3I3nNoOsRXurRUQzj+5j/U:SZRcx5VMpOKXur2Qf+5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3945cf502363ac64b09d5d951d1e13c6_JaffaCakes118

Files

3945cf502363ac64b09d5d951d1e13c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a3a898aaad84051a2ac225fe198c37a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePenIndirect
SelectPalette
CreateDIBSection

version

GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA

kernel32

LoadResource
LoadLibraryExA
LoadLibraryA
lstrlenA
VirtualAllocEx
InitializeCriticalSection

user32

EndDialog
SystemParametersInfoA
GetMenuItemCount
WaitMessage
TranslateMessage
PostQuitMessage
DestroyWindow
DrawEdge
RemovePropA
PeekMessageW
GetClipboardData
SetScrollInfo
EnableWindow
OpenClipboard
GetMenu
CharLowerBuffA
GetClassLongA
SetMenuItemInfoA
MessageBeep
InflateRect
GetWindowRect
ReleaseCapture
IsWindowVisible
DispatchMessageA
DestroyCursor
DrawMenuBar
ChildWindowFromPoint
CharNextW
InvalidateRect
SendMessageA
EnumChildWindows
GetKeyNameTextA
MessageBoxA
AdjustWindowRectEx
PeekMessageA
CharNextA
MsgWaitForMultipleObjects
IsMenu
GetScrollRange
WindowFromPoint
GetWindowThreadProcessId
CreatePopupMenu
UnhookWindowsHookEx
CharLowerA
DestroyMenu
IntersectRect
EnableMenuItem
GetKeyboardState
GetLastActivePopup
IsChild
IsIconic
TrackPopupMenu
SetRect
GetSystemMenu
GetWindowDC
GetKeyState
KillTimer
DefFrameProcA
SetParent
wsprintfA
SetWindowPos
EndPaint
GetKeyboardType
GetTopWindow
GetDC
DefMDIChildProcA
BeginPaint
SetScrollRange
MoveWindow
EnumThreadWindows
GetKeyboardLayoutNameA
SetScrollPos
UpdateWindow
GetParent

Exports

Exports

_D2cvaerX@24
_qGQuDZiY@16
q5obCk3S@16
_18H7KG@24
iUbTehlF1e8n
_nJ5fZj8bYRCkQF
izYHSM
_Uvyn1J4qas
jEflHjHDiP@16
_Jfeg3o1veiT
_YS3QKKguc6Y_Q
X93EFTjfWcdz8E@4
rczvj5o4eHah@16
_EDtMxN@16
_v75fhfNpnwS@4
_o7g7eH@24
WMWtLt7a8V@8
_FQG0bU_Yx27l4@12
Oz4wdVaw@16
7PmZCcu8h
Ts2J_cUhKfajX@4
lo212SxwdC5_@12
_GHMVT21NQ@4
k5SSpg89W94pNC
gizl0l@8
xaGEUtSbTSyJN@8
LXtIWw64h@8

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a3a898aaad84051a2ac225fe198c37a

Headers

File Characteristics

Imports

gdi32

version

kernel32

user32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 143KB

.data Size: 98KB - Virtual size: 98KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 143KB

.data
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 2KB - Virtual size: 1KB