51fb6b25f22882077a69293cbc9ad51b_JaffaCakes118

General

Target

51fb6b25f22882077a69293cbc9ad51b_JaffaCakes118
Size

553KB
MD5

51fb6b25f22882077a69293cbc9ad51b
SHA1

04847794abe6b5fc8fcde77266b0067707068b0f
SHA256

b130b38d9b085d689f27e1cc917fe973666656a877f1fd3366774f7a5de6b3ce
SHA512

0f9ccd6b00eb972f9d3b61a9f4f89e1f4e793750bafff69a0285d1f2869a7295052427f1ed88a7fb352d7bb45a2e112c2abb333cdb02ce640f431602e69384c3
SSDEEP

12288:vg9jwdvukfAboffWS0yJX6vfd1g2+rnhKKbvRuVtpe:vaL2AbsKyJK9211ktp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51fb6b25f22882077a69293cbc9ad51b_JaffaCakes118

Files

51fb6b25f22882077a69293cbc9ad51b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b057b8eb5f4f65c262f72554d71ea4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
SetCapture
SendMessageA
EnableMenuItem
BeginPaint
ReleaseDC
GetSystemMetrics
GetClientRect
TranslateMessage
GetKeyState
EndDialog
KillTimer

kernel32

GetStringTypeA
lstrlenA
ExitProcess
GetCurrentProcess
InterlockedIncrement
GetVersion
SetFilePointer
GetOEMCP
SetErrorMode
GetCurrentThreadId
GetFileAttributesW
FindClose
ReleaseMutex
FlushFileBuffers
GetStringTypeW
GetLocalTime
HeapFree
RaiseException
GetSystemInfo
HeapDestroy
GetStartupInfoA
TlsFree
lstrcmpiW
VirtualFree
SetEndOfFile
VirtualAlloc
GetProcAddress
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
GetCPInfo
SetHandleCount
GlobalFree
QueryPerformanceCounter
GetStdHandle
GetFileType
CreateFileA
DeleteFileA
GetModuleHandleW
WriteFile

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strcmpi
_exit
_XcptFilter
exit
_acmdln

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 501KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b057b8eb5f4f65c262f72554d71ea4a

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 501KB - Virtual size: 500KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 501KB - Virtual size: 500KB

.rsrc
Size: 2KB - Virtual size: 2KB