08e073909fa639fcf1a1412bf75f152e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

08e073909fa639fcf1a1412bf75f152e_JaffaCakes118
Size

200KB
MD5

08e073909fa639fcf1a1412bf75f152e
SHA1

c4b06a651ae3c6126d3252dfe21359f4cb683943
SHA256

f0ed0eeba4fa098058dbacb0709a832241654f799c1d01c34a9471465a6cbfd6
SHA512

bd41cbf02d7baff723b6c29032921f833c62ec8f09e1d15a15d43cf475738794a9d6ff55d21a38db43754b40460874c3de9bf80c713b6d5620b0d241ffcbba1a
SSDEEP

3072:PfEzrnyIwyaMsUbfGfIwGAo4Dr4UXVQZA5Gg0om9nFH/:nEHyIwOsR94gD05P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08e073909fa639fcf1a1412bf75f152e_JaffaCakes118

Files

08e073909fa639fcf1a1412bf75f152e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c74663829751905a5488289f1d65171

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
VerInstallFileA
VerQueryValueA

ole32

CoGetContextToken
CoRegisterClassObject
PropVariantClear
CoGetMalloc
GetHGlobalFromStream
StgOpenStorage
ReleaseStgMedium
WriteClassStm

advapi32

RegEnumValueA
RegQueryValueA
RegEnumKeyExA

msvcrt

exit
atan
log10
asin
rand
log

user32

GetDlgItem
GetSystemMenu
DrawTextA
GetCursorPos
TranslateMDISysAccel
SetWindowTextA
MessageBeep
EnableMenuItem
GetKeyNameTextA
WaitMessage
CheckMenuItem
GetScrollRange
GetDesktopWindow
DeleteMenu
SetClipboardData
SetScrollPos
EnableWindow
SetCursor
InflateRect
LoadCursorA
DrawMenuBar
CreatePopupMenu
InsertMenuA
SetMenuItemInfoA
GetDC
GetParent
SetWindowLongW
DestroyCursor
CharUpperBuffA
ReleaseCapture
SetFocus
PtInRect
SetWindowsHookExA
ScrollWindow
GetClientRect
DispatchMessageW
GetKeyboardLayout
SetScrollInfo
CharLowerA
RemovePropA
LoadStringA
PostQuitMessage
LoadIconA
LoadBitmapA
MapWindowPoints
TranslateMessage
GetWindowPlacement
SendMessageW
FrameRect
CharToOemA
CharNextW
CallWindowProcA
SetTimer
EnumWindows
SetParent
GetKeyboardType
GetPropA
DrawFrameControl
CharLowerBuffA
DefWindowProcA
GetMenu
SetWindowPos
wsprintfA
GetClassInfoA
ReleaseDC
PeekMessageA
MsgWaitForMultipleObjects
BeginPaint
EnumThreadWindows
UnhookWindowsHookEx
IsDialogMessageW
SetForegroundWindow
GetWindow
GetKeyboardLayoutNameA
GetTopWindow
EnumChildWindows
UnregisterClassA
SetWindowPlacement
EqualRect
DefFrameProcA
PeekMessageW
GetMenuItemCount
SendMessageA
DrawIconEx
SetActiveWindow
EnableScrollBar
UpdateWindow
IsDialogMessageA
SystemParametersInfoA
MessageBoxA
RedrawWindow
ClientToScreen
DrawIcon
GetIconInfo
FindWindowA
DispatchMessageA
GetKeyState
RegisterClassA
GetWindowDC
GetFocus
IsZoomed
IsWindow
GetKeyboardLayoutList
GetClassNameA
IsWindowUnicode
RegisterClipboardFormatA
GetClassLongA
ScreenToClient
GetMenuStringA
GetCapture
GetClipboardData
ShowOwnedPopups
SetCapture
RegisterWindowMessageA
EmptyClipboard
CreateMenu
GetCursor
GetSubMenu
DestroyWindow
IsRectEmpty
GetWindowLongA
WindowFromPoint
InsertMenuItemA
MoveWindow
SetClassLongA
GetMenuState
GetDCEx
GetMessagePos
ShowScrollBar
EndPaint
GetScrollPos
CharNextA
FillRect
DrawEdge
AdjustWindowRectEx
OemToCharA
GetWindowTextA
ShowWindow
GetSysColor
IntersectRect
CreateWindowExA
DefMDIChildProcA
OpenClipboard
CreateIcon
ChildWindowFromPoint
GetWindowRect
InvalidateRect
KillTimer
PostMessageA
GetWindowThreadProcessId

comctl32

ImageList_Draw
ImageList_DragShowNolock
ImageList_Read

gdi32

GetObjectA
CreateDIBitmap
GetClipBox
CreatePalette
GetDIBits
GetBitmapBits
CreateCompatibleBitmap
GetDCOrgEx
CreatePenIndirect
CreateFontIndirectA

kernel32

VirtualAllocEx
GetCommandLineW
GetCommandLineA
ExitThread
lstrlenA
GetProcAddress
IsBadReadPtr
GetVersionExA
ExitProcess
GetModuleHandleA
LoadLibraryA
VirtualAlloc
LocalAlloc

shell32

SHFileOperationA

shlwapi

PathGetCharTypeA
PathIsDirectoryA
PathIsContentTypeA
SHStrDupA

comdlg32

GetFileTitleA

Sections

CODE
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 673B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc5
Size: 512B - Virtual size: 209B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc1
Size: 512B - Virtual size: 333B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc7
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc3
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c74663829751905a5488289f1d65171

Headers

File Characteristics

Imports

version

ole32

advapi32

msvcrt

user32

comctl32

gdi32

kernel32

shell32

shlwapi

comdlg32

Sections

CODE Size: 60KB - Virtual size: 60KB

DATA Size: 1024B - Virtual size: 673B

.rsrc5 Size: 512B - Virtual size: 209B

.rsrc1 Size: 512B - Virtual size: 333B

.rsrc7 Size: 6KB - Virtual size: 6KB

.rsrc3 Size: 512B - Virtual size: 120B

.rsrc9 Size: 129KB - Virtual size: 128KB

.rsrc Size: 1024B - Virtual size: 976B

CODE
Size: 60KB - Virtual size: 60KB

DATA
Size: 1024B - Virtual size: 673B

.rsrc5
Size: 512B - Virtual size: 209B

.rsrc1
Size: 512B - Virtual size: 333B

.rsrc7
Size: 6KB - Virtual size: 6KB

.rsrc3
Size: 512B - Virtual size: 120B

.rsrc9
Size: 129KB - Virtual size: 128KB

.rsrc
Size: 1024B - Virtual size: 976B