e794147d3d3c3b015691fe2c72adb0ac_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e794147d3d3c3b015691fe2c72adb0ac_JaffaCakes118
Size

71KB
MD5

e794147d3d3c3b015691fe2c72adb0ac
SHA1

2a4760c24511f135e21dd99547b962e99b8b2764
SHA256

47868576191cdfecc3c5b46c442ae038f02db63f214f2c25cdb7d11888cb2788
SHA512

79beb2e09fd0df5b42e6c2a1a7b3504a821ea2f90e2751c01e4b564134b0587bad6c0ba7c76363a20d58d268ae8ed083ecdffe47a427412801f841e17350650a
SSDEEP

1536:gpmzcHvPDyy7UrECCWpUBrEaAlQYX2KPKFrN:gp5DKroGUBreQYX2KiFrN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e794147d3d3c3b015691fe2c72adb0ac_JaffaCakes118

Files

e794147d3d3c3b015691fe2c72adb0ac_JaffaCakes118
.exe windows:5 windows

baa222d47558a89bcb784651a84fdd4e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

ExtractAssociatedIconA
ShellExecuteExA
DragQueryFileA
DragFinish
ShellAboutA
ord62
DragAcceptFiles

olecli32

ord11
ord46
ord27
ord2
ord39
ord37
ord35
ord42
ord28
ord14
ord15
ord36
ord21
ord41
ord43
ord44
ord9
ord10
ord45
ord20
ord25
ord3
ord22
ord32
ord29
ord13
ord23
ord18
ord19
ord24
ord40
ord6
ord4
ord12

olesvr32

ord4
ord7
ord5
ord2
ord3
ord6
ord8
ord10

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegQueryValueA

msvcrt

memmove
strchr
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_except_handler3
_controlfp
__set_app_type

kernel32

lstrcmpA
MultiByteToWideChar
FindClose
GlobalDeleteAtom
GlobalAddAtomA
FindFirstFileA
LocalLock
LocalUnlock
LocalFree
GetTempPathA
GetTempFileNameA
GlobalHandle
_lwrite
Sleep
AddAtomA
CreateThread
_lopen
_lread
DeleteAtom
DeleteFileA
GetAtomNameA
WaitForSingleObject
CloseHandle
GetLastError
GlobalAlloc
GlobalReAlloc
GlobalFree
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
LocalAlloc
WideCharToMultiByte
lstrcatA
GetACP
MulDiv
GetThreadLocale
lstrcmpiA
GlobalLock
GlobalUnlock
OpenFile
_lcreat
_llseek
_lclose
lstrcpyA
GetProcAddress
lstrlenA

gdi32

CopyMetaFileA
CreateMetaFileA
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
SetTextColor
SetBkColor
SelectObject
PatBlt
GetStockObject
TranslateCharsetInfo
CreateFontIndirectA
GetTextExtentPoint32A
DeleteObject
GetDeviceCaps
GetLayout
SetLayout
SetBkMode
SetTextAlign
TextOutA

user32

IsWindowVisible
PeekMessageA
OemToCharA
EnumThreadWindows
SetFocus
IsRectEmpty
RegisterClipboardFormatA
SetRectEmpty
DrawIcon
GetMenu
SendDlgItemMessageA
GetDlgItemTextA
CheckDlgButton
DestroyIcon
CharUpperBuffA
CharLowerA
CharNextA
OffsetRect
TranslateMessage
GetScrollRange
ReleaseDC
GetDC
CreateWindowExA
LoadStringA
LoadCursorA
GetSysColorBrush
LoadAcceleratorsA
DispatchMessageA
ScrollWindow
TranslateAcceleratorA
GetMessageA
SendMessageA
ShowWindow
GetTopWindow
SetDlgItemTextA
wsprintfA
EndDialog
GetSystemMetrics
MessageBoxA
DialogBoxParamA
IsWindow
EnableMenuItem
DestroyMenu
InsertMenuA
CreatePopupMenu
DeleteMenu
GetClientRect
SetWindowTextA
IsClipboardFormatAvailable
GetSubMenu
PostQuitMessage
LoadIconA
InvalidateRect
CloseClipboard
GetClipboardData
OpenClipboard
PostMessageA
DefWindowProcA
RegisterClassA
DestroyWindow
EnableScrollBar
EnableWindow
CheckRadioButton
SetScrollPos
GetScrollPos
IsDlgButtonChecked
SetWindowPos
GetWindowDC
SetClipboardData
EmptyClipboard
SystemParametersInfoA
EndPaint
FillRect
SetRect
BeginPaint
ReleaseCapture
ScreenToClient
SetCursor
SetCapture
IsIconic
DrawTextA
GetSysColor
UpdateWindow
BringWindowToTop
IsWindowEnabled
GetDlgItem
GetKeyState
DrawFocusRect

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa222d47558a89bcb784651a84fdd4e

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

shell32

olecli32

olesvr32

advapi32

msvcrt

kernel32

gdi32

user32

Sections

.text Size: 38KB - Virtual size: 38KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 31KB - Virtual size: 31KB

.text
Size: 38KB - Virtual size: 38KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 31KB - Virtual size: 31KB