0e26e6014c228b0e1a11cd04a1977b34_JaffaCakes118

General

Target

0e26e6014c228b0e1a11cd04a1977b34_JaffaCakes118
Size

294KB
MD5

0e26e6014c228b0e1a11cd04a1977b34
SHA1

b073cae2c85d536f50286fc52f195e0d3471e0fa
SHA256

594d9dc35e2b3b30897139209f951ba2867bbe16d867f5b2ceb63a7e1f92d09d
SHA512

02b621d0d3aa3ebf76325fe2ff8ce86155fc0be7733d24f7077e3f7df04ac7ad8e21604d50fadfa3e0afa2ed05317ce9d8dd524a970a913c757a331febe2037a
SSDEEP

6144:n2t42otSHiQvgMya10lAUauyXhps+ce1HcoyUtMgIvJ+ipYzSO1jdq+nCm:2t42LHiQYu+JApse18V4MgWJ+HDq+Cm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e26e6014c228b0e1a11cd04a1977b34_JaffaCakes118

Files

0e26e6014c228b0e1a11cd04a1977b34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a23da1a069762fd30f58281f053e9a7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetNextDlgGroupItem
GetDlgItemTextA
GetParent
MessageBoxExA
WindowFromPoint
SetSysColors
CreateDialogIndirectParamA
CascadeWindows
GetDialogBaseUnits
GetDlgItemInt
IsWindow
GetLastActivePopup
DeferWindowPos
ArrangeIconicWindows
IsChild

ole32

OleQueryCreateFromData
CoFreeAllLibraries
CoInitialize
OleRegEnumVerbs
RegisterDragDrop
OleRegGetMiscStatus
OleGetClipboard
CoRegisterMallocSpy
GetClassFile
OleLoadFromStream

oleaut32

OleCreatePropertyFrame

kernel32

GetSystemDefaultLangID
GetModuleHandleA
VirtualAlloc
IsBadCodePtr
GlobalFree
GlobalLock
GetProcAddress
GetSystemDefaultLCID
GlobalReAlloc
GlobalHandle
GetNumberFormatA
LocalHandle
HeapCreate
ReleaseSemaphore
VirtualProtect
GetStartupInfoA
GlobalMemoryStatus
ResetEvent
InitializeCriticalSection

msvcrt

__setusermatherr
__getmainargs
_controlfp
_except_handler3
_acmdln
exit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_XcptFilter
_exit
_initterm

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a23da1a069762fd30f58281f053e9a7c

Headers

File Characteristics

Imports

user32

ole32

oleaut32

kernel32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 276KB - Virtual size: 379KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 276KB - Virtual size: 379KB

.rsrc
Size: 4KB - Virtual size: 3KB