e7f3c74509f3162e07573b78621cd279_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e7f3c74509f3162e07573b78621cd279_JaffaCakes118
Size

47KB
MD5

e7f3c74509f3162e07573b78621cd279
SHA1

29ab38196b7823a09b8b7fc6707cda507c065126
SHA256

a62ca62acce9d81f8de8fd8497e79349166514e678947ae606623e403e1c7b04
SHA512

28db2cf254707168f3daf944dc129f90fdba33bd9ff445043f0cb4578894b9ab5a0b060329971f889181929381cc4fa584c16b99e189d4064da5fd4be234af3f
SSDEEP

768:VaMVu1uf29+rtD27EvrnMF7UuIX456l582cLSoaxdW2MlgW6SeFuSm:V39f29+rV278nMLYev+oa+7D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7f3c74509f3162e07573b78621cd279_JaffaCakes118

Files

e7f3c74509f3162e07573b78621cd279_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a34af10271ad73ba1ab08efec08769c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommError
GetAtomNameW
CreateEventA
DebugActiveProcess
GetLastError
GetConsoleAliasesLengthA
RequestDeviceWakeup
GetProcessShutdownParameters
GetLogicalDriveStringsA
VirtualProtect
GetProcessHeaps
CreateFileW
DeleteCriticalSection
SetConsoleOS2OemFormat
GetDiskFreeSpaceExA
HeapSize
GetFileAttributesA
GetEnvironmentStrings
GetShortPathNameW
Heap32Next
GlobalFlags
CompareStringW
WaitForSingleObject
EnumSystemCodePagesA
GetDriveTypeA

user32

DestroyWindow
PostQuitMessage
CharUpperBuffA
CopyImage
PrivateExtractIconsW
UnionRect
GetWindowModuleFileName
SubtractRect
GetClipboardFormatNameA
IMPSetIMEW
UpdateLayeredWindow
GetShellWindow
SendMessageCallbackA
DefFrameProcA
SendInput
RealGetWindowClassA
CloseWindow
ScrollChildren
GetKeyNameTextA
SetMenuInfo
LoadKeyboardLayoutA
DrawTextA
SetWindowLongA
OpenWindowStationA
MapVirtualKeyW
DialogBoxIndirectParamW
SetWindowsHookExW
IsChild
GetDlgItem
GetWindowContextHelpId
SetTimer
WaitMessage
ChildWindowFromPoint
IsMenu
GetKeyboardState
DdeGetLastError

gdi32

SetTextColor
GdiSetAttrs
SaveDC
ExtCreateRegion
RemoveFontResourceA
BRUSHOBJ_pvAllocRbrush
FloodFill
EngEraseSurface
SetDIBColorTable
SetPaletteEntries
GetMapMode
GetDCBrushColor
GdiFullscreenControl
EngDeletePath
MaskBlt
GetCharWidthFloatW
GdiGetCodePage
GdiDeleteLocalDC
SetViewportOrgEx
GdiConvertBitmap

comdlg32

PrintDlgA
GetSaveFileNameW
FindTextW
Ssync_ANSI_UNICODE_Struct_For_WOW
dwLBSubclass
ChooseColorA
GetFileTitleW
ChooseFontA
ReplaceTextA
GetOpenFileNameW
CommDlgExtendedError
PrintDlgExW

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a34af10271ad73ba1ab08efec08769c8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 4KB - Virtual size: 40KB

.data Size: 38KB - Virtual size: 40KB

.idata Size: 3KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 40KB

.data
Size: 38KB - Virtual size: 40KB

.idata
Size: 3KB - Virtual size: 4KB