39f8852938accde13f9334d19d814507_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

39f8852938accde13f9334d19d814507_JaffaCakes118
Size

345KB
MD5

39f8852938accde13f9334d19d814507
SHA1

50917e37f5852ad73ed5f9f2ff42d827a6362852
SHA256

e000831a8baebf6048fe1c30707efe139c5dea650ced4ffe94acc4654ff03d08
SHA512

e8b20b5bd13608bf6e399f585d23340572f50c78b22bdb471da0a27fe5fbefe4474151286be8f7e6888f3b4034555878a11da311ffe1633972a2b9c3d946bdb0
SSDEEP

6144:fSiekHr0l2EfSwTMR9EuhNiXXVO3EbLVUX5+puGGtoMBFLCnLji:O00l5PTMwwNiVO3K6+pEBFLCLO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39f8852938accde13f9334d19d814507_JaffaCakes118

Files

39f8852938accde13f9334d19d814507_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e8f6cd386da030961f989547a5ba3fcb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OpenClipboard

oledlg

ord9

oleaut32

RegisterTypeLi
LHashValOfNameSys

kernel32

GetCurrentThreadId
LoadLibraryA
GetModuleHandleA
GetProcAddress
ExitProcess
InterlockedDecrement
InterlockedIncrement
GetStartupInfoA
GetCommandLineA
GetVersion
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 508KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uwkvl
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.citt
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8f6cd386da030961f989547a5ba3fcb

Headers

File Characteristics

Imports

user32

oledlg

oleaut32

kernel32

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 508KB

.uwkvl Size: 209KB - Virtual size: 209KB

.citt Size: 88KB - Virtual size: 88KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 508KB

.uwkvl
Size: 209KB - Virtual size: 209KB

.citt
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 5KB - Virtual size: 5KB