53c6533419cc0c4f3fdde8391e270b74_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

53c6533419cc0c4f3fdde8391e270b74_JaffaCakes118
Size

44KB
MD5

53c6533419cc0c4f3fdde8391e270b74
SHA1

da681236b6cd8d889a8d05e3fd4e0dff0d0a1a26
SHA256

da01083175d5972ecad25f83c269dd729788d97de7b79ca4949ebd1db4698fbc
SHA512

9b80fba166d38ff185dd3ae8b7e389649669699877c09dbd5c43b8358a998b2240d079a3360bb5efcb85d00c65c8b13fc187854555f83906917f85192d45ee9e
SSDEEP

384:lmg//L452JAwtNTTNBqw1jUOJWtt2jzXk7I4eVHY/c/l1iYNPmPjPCkvglk7Oy0q:lJ//cdwXOijUOG2jz0c4c7+CvnCb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53c6533419cc0c4f3fdde8391e270b74_JaffaCakes118

Files

53c6533419cc0c4f3fdde8391e270b74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edb8d36aa110039c7a2efa800666ee81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
_exit
_onexit
__dllonexit
strcat
strcspn
??3@YAXPAX@Z
mbstowcs
strrchr
fopen
fwrite
fclose
strstr
strchr
memcpy
strlen
atoi
sprintf
memset
strcpy
_snprintf
strncat
strncpy
__p__fmode

user32

SetDlgItemTextA
SendMessageA
SetWindowTextA
ShowWindow
CreateDialogParamA
DispatchMessageA
GetMessageA
LoadImageA
GetSystemMetrics
FillRect
GetClientRect
PostMessageA
KillTimer
IsDialogMessageA
RegisterClassExA
TranslateMessage
EnableWindow
SetTimer
GetDlgItemTextA
LoadStringA
EndDialog
PostQuitMessage
GetDlgItem
MessageBoxA

gdi32

SetBkColor
SetTextColor
CreateSolidBrush

shell32

ShellExecuteA
SHGetSpecialFolderPathA

ws2_32

WSAStartup
closesocket
recv
socket
htons
inet_addr
gethostbyname
connect
WSAGetLastError
send
select
__WSAFDIsSet

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocString
VariantInit
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
VariantClear

advapi32

RegCreateKeyExA
RegQueryValueExA
RegCloseKey

kernel32

GetModuleFileNameA
CreateThread
GetTickCount
lstrcatA
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
lstrlenA
GetVersionExA
GlobalFree
GlobalAlloc
Sleep
lstrcpyA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

edb8d36aa110039c7a2efa800666ee81

Headers

File Characteristics

Imports

msvcrt

user32

gdi32

shell32

ws2_32

ole32

oleaut32

advapi32

kernel32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 8KB - Virtual size: 7KB