0f27b73b84562595f76db8e53f16147e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0f27b73b84562595f76db8e53f16147e_JaffaCakes118
Size

63KB
MD5

0f27b73b84562595f76db8e53f16147e
SHA1

74f378ff5e875019ba209ca3be0254deaeb31d3d
SHA256

cadb94b5ff6eceab1ee0d9635701fb42e9c26a2195d815e86eb3d7adf0dcddd5
SHA512

c80da583fc21e679b8557197e6afb8982768a4efdb91d295474eca65f2177bbd0f5b8b1d47c0f9b4b2a0583ab0683aa670fee937ca30bc8ae88283051a6eded4
SSDEEP

1536:2MNkJD1BaA5vfSQr3FFQ+/DUMj7wX+YmjEqw:2MOJD1B7r1bA3+Ymwqw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f27b73b84562595f76db8e53f16147e_JaffaCakes118

Files

0f27b73b84562595f76db8e53f16147e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ba8dbd442b4391ccb09af4f938ed4401

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryW
IsBadCodePtr
GlobalFree
GetLogicalDriveStringsA
GetTickCount
CreateSemaphoreA
GetModuleHandleA
GetCurrentProcessId
GetShortPathNameA
SetFileAttributesA
SetFileTime
SetThreadAffinityMask
LocalFileTimeToFileTime
SetPriorityClass
Sleep
ReleaseMutex
GetOverlappedResult
GetEnvironmentVariableW

comdlg32

ReplaceTextW
GetOpenFileNameW
PageSetupDlgW
PrintDlgW
ChooseFontW
FindTextW
ChooseColorW
GetSaveFileNameW
PrintDlgExW
GetFileTitleW

user32

CheckRadioButton
SetScrollInfo
GetCursorPos
DestroyIcon
GrayStringW
RegisterClassExA
HiliteMenuItem
GetKeyboardLayoutNameW
ExitWindowsEx
GetNextDlgGroupItem
IsZoomed
MessageBoxExW
GetWindowLongA
CreateIconIndirect
CreateWindowExA
DefDlgProcW

shlwapi

StrNCatW

gdi32

CreatePen
CreateFontIndirectA
SetMagicColors
PtInRegion
CreateFontIndirectW
OffsetRgn
WidenPath
GetLayout
GetROP2
UnrealizeObject
ResizePalette
TextOutA
SelectPalette
RoundRect
GetTextCharsetInfo
GetObjectW

msvcrt

wcschr
gmtime
wcstombs
fclose
ctime
strncmp
fseek
remove
wcstok
printf

winspool.drv

DeletePortW
DeleteMonitorW

comctl32

ImageList_SetIconSize
ImageList_GetImageCount
DestroyPropertySheetPage
PropertySheetA
PropertySheetW
CreateToolbarEx
CreatePropertySheetPageW
ImageList_Create
ImageList_Draw
ImageList_ReplaceIcon
ImageList_AddMasked
CreatePropertySheetPageA

Exports

Exports

_HtSUz_ieqid_zskw@12
_PnGg_gnrqp_qY@12
_QuH_gdsts_gujh_d@4

Sections

.code
Size: 512B - Virtual size: 283KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.temp
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba8dbd442b4391ccb09af4f938ed4401

Headers

File Characteristics

Imports

kernel32

comdlg32

user32

shlwapi

gdi32

msvcrt

winspool.drv

comctl32

Exports

Exports

Sections

.code Size: 512B - Virtual size: 283KB

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 6KB - Virtual size: 6KB

.temp Size: 512B - Virtual size: 512B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 5KB - Virtual size: 4KB

.code
Size: 512B - Virtual size: 283KB

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 6KB - Virtual size: 6KB

.temp
Size: 512B - Virtual size: 512B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 5KB - Virtual size: 4KB