53e14a2a2cde4752d95138ffb1105399_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

53e14a2a2cde4752d95138ffb1105399_JaffaCakes118
Size

41KB
MD5

53e14a2a2cde4752d95138ffb1105399
SHA1

867df4dcc03e645630aac5abe8caa62263634f25
SHA256

e439e4bc2d43ec38cc52fc902fa0dd92dbf1f6b17916bd4323b28579c7a53796
SHA512

4f9acb6e2fe3b950bcaf10d83b644709d014738cbd38873023ecfd210c215ab295271f3a4bac92b40fb6d7dca853ee11dbaf46f351ea8f19c02ed538678a893d
SSDEEP

768:TA6GVg7R727G6cOtHP0c81EKMqBOmdOi5gQUg04IOXOzkOTw2LPfoso:06SG6ns5MrrKUr4I2OQiDg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53e14a2a2cde4752d95138ffb1105399_JaffaCakes118

Files

53e14a2a2cde4752d95138ffb1105399_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cae2faf1670a2b344289df5c5a99e33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlFindClearBits
LdrFindResource_U
RtlRaiseException
RtlSelfRelativeToAbsoluteSD
NtAreMappedFilesTheSame
tan
NtClose
DbgUiStopDebugging
RtlInitializeContext
NtAllocateVirtualMemory

kernel32

ExpandEnvironmentStringsA
RemoveDirectoryW
GetModuleFileNameA
GetShortPathNameA
lstrcpyW
GetEnvironmentVariableW
lstrlen
lstrcmpA
CreateMutexA
Sleep
QueryPerformanceFrequency
SetThreadLocale
GetModuleHandleA
GetProcessHeaps

user32

MessageBoxIndirectA
SetCapture
RegisterWindowMessageW
TrackPopupMenu
SetDlgItemInt
GetCursorPos
DefWindowProcW
SetScrollInfo
GetClassInfoA
CharNextW
CreateDialogIndirectParamW
EndDialog
GetIconInfo
SetTimer
GetWindowTextLengthW
GetClassLongA

gdi32

CreateBitmap
GetBkColor
MoveToEx
CombineRgn

advapi32

RegFlushKey
RegEnumValueW

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameW

shell32

StrCmpNIA

ole32

CoCreateInstanceEx
OleCreate
CoGetInstanceFromFile

version

GetFileVersionInfoSizeA

ws2_32

inet_ntoa
WSAConnect
WSACloseEvent
accept

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cae2faf1670a2b344289df5c5a99e33

Headers

File Characteristics

Imports

ntdll

kernel32

user32

gdi32

advapi32

comdlg32

shell32

ole32

version

ws2_32

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 21KB - Virtual size: 21KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 21KB - Virtual size: 21KB

.rsrc
Size: 5KB - Virtual size: 5KB