0d155a6d88303e434a8b3c1ddf33c874_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d155a6d88303e434a8b3c1ddf33c874_JaffaCakes118
Size

284KB
MD5

0d155a6d88303e434a8b3c1ddf33c874
SHA1

a62afd49a6bce86972c2a8c87b044e4e504578ea
SHA256

b40f9f98e3e3f0121f56ae7fa84266b3e189956c63322db35fb77896176dbd34
SHA512

df9e9d81253abf5f8f2a60e692a68ed3e969a4e96ad35d3ce7d1e77e07c7ff45890260b2f2fe144a6ba350638f3ded4f5672fab4f6cc4dd856240a8b42176eed
SSDEEP

6144:zRB0g86TVknLsH6KNeSug2U2C72JJtaXP8:zsgxk4engc+ItaE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d155a6d88303e434a8b3c1ddf33c874_JaffaCakes118

Files

0d155a6d88303e434a8b3c1ddf33c874_JaffaCakes118
.exe windows:5 windows x86 arch:x86

98feaf0f8f73f7370e6122d9107f77bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

ShellAboutA

msvcrt

_exit
_strrev
_CxxThrowException
__CxxFrameHandler
_EH_prolog
_controlfp
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
toupper
memmove
strchr

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

kernel32

LocalReAlloc
LocalAlloc
GetCommandLineA
GetProfileIntA
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GlobalCompact
GlobalReAlloc
GlobalAlloc
GlobalFree
lstrcmpA
Sleep
WriteProfileStringA
GlobalLock
GlobalSize
GlobalUnlock
CloseHandle
CreateEventA
CreateThread
ResetEvent
SetEvent
WaitForSingleObject
lstrcpyA
LocalFree
lstrlenA
lstrcatA
GetProfileStringA

gdi32

SetBkColor
SetTextColor

user32

MessageBoxA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
IsChild
IsDialogMessageA
GetMessageA
LoadAcceleratorsA
CreateWindowExA
LoadStringA
CharNextA
RegisterClassExA
GetSysColorBrush
LoadCursorA
LoadIconA
InvalidateRect
UpdateWindow
ShowWindow
SetDlgItemTextA
CheckMenuRadioItem
GetSubMenu
GetMenu
SetWindowPos
OffsetRect
MapWindowPoints
GetClientRect
EnableWindow
GetDlgItem
CreateDialogParamA
DestroyWindow
GetWindowRect
SetCursor
CheckRadioButton
SetFocus
MessageBeep
SendMessageA
EndDialog
DialogBoxParamA
SetWindowTextA
CloseClipboard
GetClipboardData
OpenClipboard
DestroyMenu
TrackPopupMenuEx
LoadMenuA
DefWindowProcA
ChildWindowFromPoint
ScreenToClient
PostQuitMessage
WinHelpA
EnableMenuItem
IsClipboardFormatAvailable
GetDlgCtrlID
DrawTextA
DrawEdge
GetSysColor
CheckDlgButton
SetDlgItemInt
GetWindowTextA

Sections

.idata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 192KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

98feaf0f8f73f7370e6122d9107f77bd

Headers

File Characteristics

Imports

shell32

msvcrt

advapi32

kernel32

gdi32

user32

Sections

.idata Size: 72KB - Virtual size: 70KB

.text Size: 4KB - Virtual size: 3KB

.rsrc Size: 12KB - Virtual size: 9KB

.data Size: 192KB - Virtual size: 308KB

.idata
Size: 72KB - Virtual size: 70KB

.text
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 12KB - Virtual size: 9KB

.data
Size: 192KB - Virtual size: 308KB