e8aab2ed5b5bdd7fe682140ce2422792_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e8aab2ed5b5bdd7fe682140ce2422792_JaffaCakes118
Size

159KB
MD5

e8aab2ed5b5bdd7fe682140ce2422792
SHA1

65f2c945179e80c339386bb4d46a0d3b0696eaf0
SHA256

4477a8d1d0478dee083166fc22a76dd37bc15290e0fc7d80ec442734ad92d954
SHA512

4db01676b9753535ce9eefeccfcc0aba304fae38f3b8e7412ff398ba0771317b4479c40cc8e25368e218883aa9c7e9e3c5f3dabc817e0cc27f1ce8e49b8b15af
SSDEEP

3072:oSXZu4wNQM1hvF42o9N+wcfk0slY+UP35wGHqKIu4KUvgJaqx9Dc:oSXZu4vM1VF4p8w70V5fIhYb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8aab2ed5b5bdd7fe682140ce2422792_JaffaCakes118

Files

e8aab2ed5b5bdd7fe682140ce2422792_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b47755a6b85e7e530551f8dfaf8c0df5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharLowerBuffW
RemovePropA
GetWindowThreadProcessId
PostMessageA
DrawIconEx
SetMenuItemInfoA
CallWindowProcA
DestroyIcon
GetKeyboardLayoutList
SetClipboardData
IsWindowVisible
RegisterClassW
RemoveMenu
EnumChildWindows
GetMenuStringA
DestroyCursor
FindWindowExA
GetIconInfo
CharUpperBuffW
SetWindowRgn
DestroyMenu
GetMenuItemInfoW
PtInRect
LoadStringA
RegisterWindowMessageA
MessageBeep
NotifyWinEvent
GetMenuItemID
CreatePopupMenu
PostMessageW
LoadStringW
GetWindowDC
GetClientRect
PostThreadMessageA
CallWindowProcW
GetWindowLongW
DeferWindowPos
GetDesktopWindow
GetWindowTextW
GetWindowTextLengthW

kernel32

WaitForMultipleObjects
GetWindowsDirectoryA
MapViewOfFileEx
ReadFile
GetModuleHandleA
GlobalAddAtomA
GetTempFileNameA
VirtualQueryEx
QueryPerformanceFrequency
WriteFile
ResetEvent
CompareStringW
GlobalLock
DeleteCriticalSection
HeapFree
GlobalFindAtomA
GlobalAlloc
VirtualQuery
lstrlenW
WideCharToMultiByte
UnmapViewOfFile
GetTickCount
GetStartupInfoA
TerminateProcess
WaitForSingleObject
CreateFileMappingA
GlobalAlloc
CloseHandle
GetThreadPriority
GetFullPathNameA

oleaut32

SafeArrayCreateVector
GetActiveObject
SafeArrayPutElement
SysAllocStringLen
CreateErrorInfo
SafeArrayGetElement
SysFreeString
SafeArrayPtrOfIndex

desklwid

_Getctype
_Sinh
_Dnorm
_Xbig
_Stold
_Dtest
_LXbig
_Exp
_Tolower
_FExp
_Wcrtomb

gdi32

SetPaletteEntries
GetEnhMetaFileDescriptionA
GetTextExtentPoint32A
CreatePenIndirect
ExcludeClipRect
StretchDIBits
SaveDC
GetBitmapBits
GetMapMode
GetObjectA
GdiFlush
CopyEnhMetaFileA
SetTextCharacterExtra
GetCharABCWidthsA
CreatePalette
RestoreDC
GetDeviceCaps
CreateRectRgn
ExtCreatePen
GetPaletteEntries
GetDIBColorTable
CreateICA

wininet

InternetCombineUrlA
InternetOpenA
InternetGetLastResponseInfoA
InternetErrorDlg

comdlg32

ChooseColorA
GetSaveFileNameA

advapi32

GetUserNameA
InitializeSecurityDescriptor

ole32

StringFromCLSID
CoDisconnectObject
ProgIDFromCLSID
OleInitialize
OleUninitialize
IsEqualGUID

shell32

DragQueryPoint
SHGetDesktopFolder
DragFinish

comctl32

ImageList_Replace
ImageList_Write

Sections

.text
Size: 150KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b47755a6b85e7e530551f8dfaf8c0df5

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

oleaut32

desklwid

gdi32

wininet

comdlg32

advapi32

ole32

shell32

comctl32

Sections

.text Size: 150KB - Virtual size: 152KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 4KB

.text
Size: 150KB - Virtual size: 152KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 4KB