4367e3bffd76a5fcb87eb05060c831a8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4367e3bffd76a5fcb87eb05060c831a8_JaffaCakes118
Size

77KB
MD5

4367e3bffd76a5fcb87eb05060c831a8
SHA1

4a54f73540bd5bee1e3146268fac813cab773249
SHA256

c690270b188a3b0b90be0d8071436b80cd2e2193ad0d19dbbf2d63aa742e5c1e
SHA512

bf8f0fa63cd140ed5ae5520661a7aeab533eb87682c0e061d5c43957e11d40daf0e2ed372e6c0a05701f5f33d9090d831a2e0ab6991e44d95043a5fecb3933bf
SSDEEP

1536:AiQgzHtb0eQi4C9bnWe7z9EQ3G2e7JqSbk4p:lQgzHKCNhWSGXVqz4p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4367e3bffd76a5fcb87eb05060c831a8_JaffaCakes118

Files

4367e3bffd76a5fcb87eb05060c831a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

825db8cf3c6878320f1d311d1308f717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCapture
FrameRect
GetActiveWindow
GetClassInfoA
GetMenu

kernel32

lstrcmpA
lstrcatA
GetCurrentThreadId
FormatMessageA
GlobalDeleteAtom
GetCommandLineA
GetThreadLocale
FreeResource
HeapFree
GetCurrentProcessId
SetThreadLocale
HeapDestroy
WriteFile
GetEnvironmentStrings
Sleep
GetSystemDefaultLangID
GlobalAlloc
MoveFileExA
IsBadReadPtr
GetCPInfo
GetStringTypeA
GetFileSize
GetDateFormatA
lstrcpynA
SetFilePointer
GetModuleHandleA
GetACP
HeapAlloc
ExitProcess
LockResource
GetModuleFileNameA
GetFullPathNameA
LocalAlloc
GetStringTypeW
DeleteFileA
SetErrorMode
ExitThread
IsBadHugeReadPtr
WideCharToMultiByte
FindFirstFileA
GetUserDefaultLCID
GetVersionExA
InitializeCriticalSection
FindResourceA
LoadLibraryA
GetCurrentProcess
lstrlenA
DeleteCriticalSection
GetOEMCP
MoveFileA
CreateEventA
GetCommandLineW
VirtualAllocEx
GetLastError
SetHandleCount

comctl32

ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Add

gdi32

SetPixel
CopyEnhMetaFileA
CreateDIBitmap
SetBkColor

Exports

Exports

g0Oaj
_z5GeDLM@20
erEFDy
zwMSPbqRRTUNo
_sjKoqk_5pxln5@4
_ZQadjDUaug
lFe5j8wORwk@4
pmLPa@16
_NL0O_Vv@12
6y5i_Rs@8
_0_Qz4Bnq6pVDni@12
_aLlzzt_B@4
qdrbZ@4
_tlZ61Ed5@20
_2wVLeetDs
_iHoN1
eiQyF@24
vGbDutBN5vA
uDfCr_qKV@8
6DcG_R@4
_uAwjE9H@8
_Ozqlygf@8
_KMJ9w7cu
_c7N327FoK4m@24
QWd5RYQ
_DQ_4JzTNaEp6V
A5KsPNpR6AuR
AYvAre0@20
_HqdPVMFW6jKkk
_Og95dtr1HEi
_VlRBFY9o8HflR6
_WJ6r6PW
_4zwMjl8ZLq5q
_6w3juKVQ
_Kjaxc6w4w@20
_BqREHTkE84ZeN6@24
1wUbW@20
qJF0D6YnV9
_LmYYoc1G
BgBdtud@24
_8MNgEX
P4XjqYj0ZC@16
38_bt
l9xLjnC2qEmMfw
IoIOSx9xHkE5
_Fspaa5aVexX6F@16
PHhtt7OlknkzWK@16
_zOOxKL
HVdV4ineJqC1
tD0Tx3@24
_enGbgZ3VHa@20
f6ob1u7S
tTBZL0HO@24
PpXtVKCqEWywoR
wIc7T3rrfNrmgA
_pr1JXszF3yYNsF
_LMTyAfZR@20
_iFTcsP@16
AhLorke@12
_aUwfJvIuSD@16
0nlUFdTq@24
_JQJ0wiO2TLs_6@20
___JuamE
_75xXuw1xZS@24
9l0KCzaiXd@24
fEx95FDwg89J

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 10KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kldata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

825db8cf3c6878320f1d311d1308f717

Headers

File Characteristics

Imports

user32

kernel32

comctl32

gdi32

Exports

Exports

Sections

CODE Size: 12KB - Virtual size: 12KB

.DATA Size: 10KB - Virtual size: 30KB

.kldata Size: 48KB - Virtual size: 47KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 12KB - Virtual size: 12KB

.DATA
Size: 10KB - Virtual size: 30KB

.kldata
Size: 48KB - Virtual size: 47KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB