f894cfddb7c17e2d5293d5af3af1915d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f894cfddb7c17e2d5293d5af3af1915d_JaffaCakes118
Size

95KB
MD5

f894cfddb7c17e2d5293d5af3af1915d
SHA1

fa0f6ead7c44e756f7bfc87aa801077c11dce5ab
SHA256

b7a532848215d7c59bd30081a26737aae4d95338826756167c921b17a85a4696
SHA512

05befddeff6761f16bbd6db96f9838ae673778491cdc2f4ccceee06d834fa41be9fc1e393067552f53392c50fee3b026fd6a933263d3afac044cf17e45eb8340
SSDEEP

1536:YwptYLfAKYi57nqNw+oC1p3a2pm5srag04It81Y47GdWyPz4mV:1pKc457yoypDmGrzNBYVAyPsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f894cfddb7c17e2d5293d5af3af1915d_JaffaCakes118

Files

f894cfddb7c17e2d5293d5af3af1915d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e588145af531950269187a13a428ab8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
SHGetDesktopFolder

gdi32

RestoreDC
GetBkMode

kernel32

LoadLibraryA
MoveFileA
lstrlenA
VirtualAllocEx
lstrcatA
GetACP
SetEvent
GlobalFindAtomA
SetErrorMode
SetFilePointer
SetThreadLocale
ReadFile
GetModuleHandleA
InitializeCriticalSection
lstrcmpA
HeapDestroy
IsBadHugeReadPtr
FreeResource
VirtualAlloc
DeleteFileA
LoadResource
lstrcmpiA
ExitProcess
RaiseException

user32

DispatchMessageW
IsWindowEnabled
IsZoomed
SetScrollRange
IsWindow
SetWindowTextA
OpenClipboard
SendMessageA
SystemParametersInfoA
InvalidateRect
EqualRect
GetScrollPos
GetMenuItemCount
RegisterClipboardFormatA
DrawIconEx
EnableWindow
SetActiveWindow
GetWindowTextLengthA
MsgWaitForMultipleObjects
GetWindowThreadProcessId
IntersectRect
DrawFrameControl
CharNextW
ShowScrollBar
InsertMenuA
CreateIcon
IsWindowUnicode
GetActiveWindow
SetClassLongA
UnhookWindowsHookEx
AdjustWindowRectEx
SetWindowPlacement
LoadStringA
DestroyCursor
GetCapture
GetKeyState
CharUpperA
IsCharUpperA
RegisterClassA
GetMenu
GetIconInfo
ScreenToClient
IsChild
LoadIconA
ShowOwnedPopups
ScrollWindow
GetScrollRange
TrackPopupMenu
BeginPaint
LoadBitmapA
PeekMessageW
MapVirtualKeyA
CharNextA
CallWindowProcA
GetMenuItemInfoA
GetKeyboardLayoutNameA
KillTimer
IsDialogMessageW
DefFrameProcA
InflateRect
SetCapture
FrameRect
ClientToScreen
MessageBoxA

Exports

Exports

yV0FVh

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e588145af531950269187a13a428ab8

Headers

File Characteristics

Imports

shell32

gdi32

kernel32

user32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 50KB - Virtual size: 50KB

.edata Size: 2KB - Virtual size: 1KB

.badata Size: 512B - Virtual size: 462B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 50KB - Virtual size: 50KB

.edata
Size: 2KB - Virtual size: 1KB

.badata
Size: 512B - Virtual size: 462B

.rsrc
Size: 8KB - Virtual size: 8KB