ea3c903b1e63545d014a9f51c64ea812_JaffaCakes118

General

Target

ea3c903b1e63545d014a9f51c64ea812_JaffaCakes118
Size

166KB
MD5

ea3c903b1e63545d014a9f51c64ea812
SHA1

5269f00eefdd968c42b0a38cf42c8f8debae9071
SHA256

b854b82bc03d64c4d4980ab144e7b7385a9083dcea225bbde0fb6a02ce959a30
SHA512

e875b8ac4bd3281727bc4e77a0000122e3ac7304e9d1c9c25e20814144b9126d2f580923d787cdb86936d0e4ccf021c57204d9bf62bffaa563b7e24e5cf6e255
SSDEEP

3072:X9iShh+AEO9QLsUhS72u4QHC6U/b62aVYhU0IP+TJasLZR+mzArXU5:Xhhv9CsfXtGm2aYI8guf+wu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea3c903b1e63545d014a9f51c64ea812_JaffaCakes118

Files

ea3c903b1e63545d014a9f51c64ea812_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64ee4523d043e59052c1dc38c9f7566e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetRect
LoadIconA
GetDCEx
PtInRect
CharNextA
GetPropA
GetKeyNameTextA
GetDesktopWindow
SetWindowLongA
GetMenu
GetCursor
IsWindowEnabled
DestroyIcon
IsWindowUnicode
SetClipboardData
GetClassLongA
GetKeyState
FrameRect
GetCapture
MsgWaitForMultipleObjects
PeekMessageW
EnableScrollBar
CallNextHookEx
ShowScrollBar
GetMenuItemID
ChildWindowFromPoint
GetActiveWindow
GetWindowThreadProcessId

shell32

DragQueryFileA

comdlg32

GetOpenFileNameA
ChooseColorA
GetSaveFileNameA

gdi32

SetBkMode
GetCurrentPositionEx
SaveDC
SelectPalette
CreateCompatibleBitmap
CreateBitmap
GetDIBColorTable
CopyEnhMetaFileA

advapi32

RegCreateKeyA
RegEnumKeyA
GetLengthSid
RegCreateKeyExA

version

GetFileVersionInfoA

oleaut32

SysReAllocStringLen
SysAllocStringLen

ole32

CoGetContextToken
CreateBindCtx
CreateStreamOnHGlobal

kernel32

HeapAlloc
HeapDestroy
WideCharToMultiByte
ExitProcess
FreeLibrary
GetCurrentThread
lstrcpynA
VirtualQuery
GetStartupInfoA
FindClose
VirtualAllocEx
LoadLibraryExA
lstrcatA
VirtualAlloc
GetDiskFreeSpaceA
GlobalAddAtomA
GetProcAddress
GetModuleHandleA

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 131KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64ee4523d043e59052c1dc38c9f7566e

Headers

File Characteristics

Imports

user32

shell32

comdlg32

gdi32

advapi32

version

oleaut32

ole32

kernel32

Sections

.text Size: 30KB - Virtual size: 29KB

DATA Size: 131KB - Virtual size: 187KB

.idata Size: 3KB - Virtual size: 2KB

.text
Size: 30KB - Virtual size: 29KB

DATA
Size: 131KB - Virtual size: 187KB

.idata
Size: 3KB - Virtual size: 2KB