0c28161986fa073168441b0f45813de7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0c28161986fa073168441b0f45813de7_JaffaCakes118
Size

97KB
MD5

0c28161986fa073168441b0f45813de7
SHA1

6256c6cabb0fce458d40b29f0a4f35d1b283611b
SHA256

a7426ba18f803763fe7c7dd92b5dc6c5f0e50dd4c829a5d58112187f22972d67
SHA512

49ec6892df62060693f8e7a4eaffe69347588ea4af914a5e6a4482109c1c2400c169845d831cf2650f49e44750f6954117e006faf18603b3336187141165bff3
SSDEEP

1536:t0OG03OTVt+YohsXLFb5utnUg4D4gM35Rdr/YTvCyV1nD5bPCP/h1y:t0r+eVt+YTzuWgBf37drArCyVRZCxA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c28161986fa073168441b0f45813de7_JaffaCakes118

Files

0c28161986fa073168441b0f45813de7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7486454129252b32a59ea90cb57db41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

CheckMenuItem
DrawTextA
SetWindowPlacement
DrawMenuBar
PostQuitMessage
EqualRect
GetWindowDC
CallWindowProcA
SetMenu
SetTimer
SetScrollInfo
InvalidateRect
GetScrollRange
GetKeyboardLayoutList
EnumWindows
FrameRect
MessageBeep
GetWindowRect
LoadCursorA
GetWindowLongW
ShowOwnedPopups
CreateIcon
RegisterClipboardFormatA
GetPropA
GetKeyNameTextA
DefMDIChildProcA
IsRectEmpty
GetDlgItem
PeekMessageA
WaitMessage
UnregisterClassA
SetRect
SetScrollPos
ShowScrollBar
EnableWindow
FindWindowA
GetMenuItemCount
MapWindowPoints
GetKeyboardType
SetWindowLongA
GetSystemMenu
SendMessageA
GetCursorPos
IsWindowVisible
RemoveMenu
GetKeyboardLayout
IsZoomed
SetWindowPos
DestroyCursor
GetWindowTextA
InsertMenuItemA
SetCursor
CallNextHookEx
RemovePropA
GetMenuState
RedrawWindow
GetKeyboardState
SendMessageW
GetDesktopWindow
SetCapture
GetClassInfoA
IsDialogMessageW
InsertMenuA
ChildWindowFromPoint
GetLastActivePopup
SetWindowTextA
CharToOemA
PostMessageA
SystemParametersInfoA
EnumThreadWindows
GetSysColor

oleaut32

SafeArrayGetElement
RegisterTypeLib
GetErrorInfo
SysStringLen

shell32

DragQueryFileA

msvcrt

log10
memmove
wcsncmp

comctl32

ImageList_Create
ImageList_Read
ImageList_Add
ImageList_DragShowNolock

version

GetFileVersionInfoA
VerInstallFileA

gdi32

GetDIBColorTable
GetObjectA
GetDIBits

shlwapi

PathIsDirectoryA
SHStrDupA
SHQueryValueExA
PathIsContentTypeA
SHQueryInfoKeyA
SHDeleteKeyA

kernel32

GlobalAlloc
VirtualAlloc
GetModuleHandleA
ExitThread
GetCommandLineA
GetCommandLineW
GetVersionExA
GetProcAddress
ExitProcess
IsBadReadPtr
GetLastError
LoadLibraryA
VirtualAllocEx
lstrlenA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC9
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC6
Size: 1024B - Virtual size: 691B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC2
Size: 1024B - Virtual size: 959B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC5
Size: 512B - Virtual size: 291B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC3
Size: 1024B - Virtual size: 751B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7486454129252b32a59ea90cb57db41

Headers

File Characteristics

Imports

user32

oleaut32

shell32

msvcrt

comctl32

version

gdi32

shlwapi

kernel32

Sections

.text Size: 57KB - Virtual size: 57KB

DATA Size: 289KB - Virtual size: 288KB

.RSRC9 Size: 1KB - Virtual size: 1KB

.RSRC6 Size: 1024B - Virtual size: 691B

.RSRC2 Size: 1024B - Virtual size: 959B

.RSRC8 Size: 1KB - Virtual size: 1KB

.RSRC5 Size: 512B - Virtual size: 291B

.RSRC3 Size: 1024B - Virtual size: 751B

.rsrc Size: 1024B - Virtual size: 992B

.text
Size: 57KB - Virtual size: 57KB

DATA
Size: 289KB - Virtual size: 288KB

.RSRC9
Size: 1KB - Virtual size: 1KB

.RSRC6
Size: 1024B - Virtual size: 691B

.RSRC2
Size: 1024B - Virtual size: 959B

.RSRC8
Size: 1KB - Virtual size: 1KB

.RSRC5
Size: 512B - Virtual size: 291B

.RSRC3
Size: 1024B - Virtual size: 751B

.rsrc
Size: 1024B - Virtual size: 992B