0e2031ff337958b1d3804fc4801aec22_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0e2031ff337958b1d3804fc4801aec22_JaffaCakes118
Size

276KB
MD5

0e2031ff337958b1d3804fc4801aec22
SHA1

05dc37f84dd9d41c1fc8f9c6564e02d3a724ea24
SHA256

e8bf2d73c7488c4316d745b6cbdecb16f46efedbd6b4dcdbea65a4f926450f47
SHA512

bab22365880f2576e0f842f4792a19174c73ba2349c74ce6d8b0bf9bb13112a2c0edd6defbe52c5d49da0bf15a36f7876963931527835783e6466994aac8e2b9
SSDEEP

6144:QxEWado6FopCNzA1wGz53uq7TPidip46eWzbDwG9a69jEbXRoK7PN:QxEWaddgCNzACG13jT4NiIUa5DRoKx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2031ff337958b1d3804fc4801aec22_JaffaCakes118

Files

0e2031ff337958b1d3804fc4801aec22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70f18afaf99017cf03fe791b5dc6b23f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExW
DeleteFileW
GetLogicalDrives
GetDriveTypeW
CreateEventW
GetUserDefaultLangID
GetProcAddress
MultiByteToWideChar
lstrcpyW
Sleep
LoadLibraryW
QueryDosDeviceW
TerminateThread
SetEndOfFile
GlobalAddAtomW
ExitProcess
FreeLibrary
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
CreateThread
ResetEvent
SetCurrentDirectoryW
CreateFileW
FindFirstChangeNotificationW
LockResource
FindFirstFileW
MoveFileW
ReadProcessMemory
InterlockedIncrement
GetModuleHandleW
CreateProcessW
GlobalLock
FileTimeToSystemTime
GetFileAttributesW
MulDiv
GetCurrentProcessId
SetWaitableTimer
DuplicateHandle
GlobalDeleteAtom

user32

UpdateWindow
SetDlgItemTextW
GetWindowRect
OffsetRect
GetDlgItem
GetWindowTextW
SetCapture
IsWindow
SystemParametersInfoW
DispatchMessageW
SetWindowPos
PostMessageW
ReleaseCapture
MessageBoxW
RedrawWindow
RegisterWindowMessageW
TrackPopupMenu
GetSystemMetrics
DestroyMenu
GetKeyState
VkKeyScanW
LoadIconW
SetForegroundWindow
SetCursorPos
GetSysColor
WindowFromPoint
wsprintfW
FillRect
SetLayeredWindowAttributes

gdi32

CreateICW
CreateCompatibleBitmap
SetDIBits
SetBkMode
CreateDCW
CreateSolidBrush
CreateRoundRectRgn
DPtoLP
SetTextColor
CreateCompatibleDC
GetObjectW
CreateBitmap

advapi32

RegQueryValueExW
RegDeleteValueW
LookupAccountSidW
GetUserNameW
RegOpenKeyExW
RegCreateKeyExW

shell32

SHChangeNotify

oleaut32

SysFreeString

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70f18afaf99017cf03fe791b5dc6b23f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

Sections

.text Size: 236KB - Virtual size: 235KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 236KB - Virtual size: 235KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 8KB - Virtual size: 6KB