96e128ea8dc853b0af55791da6c82398_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

96e128ea8dc853b0af55791da6c82398_JaffaCakes118
Size

344KB
MD5

96e128ea8dc853b0af55791da6c82398
SHA1

d75be2a681338078e4c656443a3a8200f5aab2ca
SHA256

2a80a0d68f9bf714c9b9d260cf41c5abba485791718075ab7af526bda0ea0647
SHA512

7bfdfe70f29176f2442f35fd805d6d9e4f4b7330a1ec0cd6df554f5b26982cb974d3674a9354299ea83c32e0483613cd54fac9a90b77ea54d7cab22e1c746cdf
SSDEEP

6144:ZBlrTU+Ajp/zfZzwvNfvtGblz9Isfq+gGctznpRf9ywSKicUAKB:tTMVzfZsFfvtGPIsfq3FpRf9I7A8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96e128ea8dc853b0af55791da6c82398_JaffaCakes118

Files

96e128ea8dc853b0af55791da6c82398_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1178a43a9018c3b8466409c42d0952c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

InitializeAcl
SetSecurityInfo

gdi32

CreateDCA
CreatePatternBrush

kernel32

CloseHandle
ContinueDebugEvent
CreateFileA
DebugActiveProcess
DebugActiveProcessStop
DeleteAtom
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCurrentProcess
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
InitAtomTable
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueueUserAPC
ReadFile
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
WaitForDebugEvent
WriteFile
lstrcatA
lstrcpyA
lstrlenA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
free
fwrite
malloc
memcpy
rand
signal
srand
strcmp
time
vfprintf

user32

GetClientRect
GetDlgItem
PostMessageA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1178a43a9018c3b8466409c42d0952c2

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

user32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 308B

.rdata Size: 512B - Virtual size: 428B

.eh_fram Size: 1024B - Virtual size: 928B

.bss Size: - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 328KB - Virtual size: 328KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 308B

.rdata
Size: 512B - Virtual size: 428B

.eh_fram
Size: 1024B - Virtual size: 928B

.bss
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 328KB - Virtual size: 328KB