0f734eefc8e069c1b9ce19529a31e75d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0f734eefc8e069c1b9ce19529a31e75d_JaffaCakes118
Size

116KB
MD5

0f734eefc8e069c1b9ce19529a31e75d
SHA1

cb0e70a5d287d12e4b3b342939ac572621ce13f6
SHA256

c6bdb0efdf011e36cd8b421093a952de2c295a7bede8e8627cffc8e9d14e546f
SHA512

97dd68d147c65575dbe9423e5f025f84247bfaaab731074649030954928925d49a30016ddf8ef76487b903e024dfeb5fc2a5b6c84772db5e49f3279ff038d4fa
SSDEEP

3072:98RTVXDNJqxSA5HDc3I3nNoOsRXurRUQzj+5g/U:SZRcx5VMpOKXur2Qf+5g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f734eefc8e069c1b9ce19529a31e75d_JaffaCakes118

Files

0f734eefc8e069c1b9ce19529a31e75d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a3a898aaad84051a2ac225fe198c37a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePenIndirect
SelectPalette
CreateDIBSection

version

GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA

kernel32

LoadResource
LoadLibraryExA
LoadLibraryA
lstrlenA
VirtualAllocEx
InitializeCriticalSection

user32

EndDialog
SystemParametersInfoA
GetMenuItemCount
WaitMessage
TranslateMessage
PostQuitMessage
DestroyWindow
DrawEdge
RemovePropA
PeekMessageW
GetClipboardData
SetScrollInfo
EnableWindow
OpenClipboard
GetMenu
CharLowerBuffA
GetClassLongA
SetMenuItemInfoA
MessageBeep
InflateRect
GetWindowRect
ReleaseCapture
IsWindowVisible
DispatchMessageA
DestroyCursor
DrawMenuBar
ChildWindowFromPoint
CharNextW
InvalidateRect
SendMessageA
EnumChildWindows
GetKeyNameTextA
MessageBoxA
AdjustWindowRectEx
PeekMessageA
CharNextA
MsgWaitForMultipleObjects
IsMenu
GetScrollRange
WindowFromPoint
GetWindowThreadProcessId
CreatePopupMenu
UnhookWindowsHookEx
CharLowerA
DestroyMenu
IntersectRect
EnableMenuItem
GetKeyboardState
GetLastActivePopup
IsChild
IsIconic
TrackPopupMenu
SetRect
GetSystemMenu
GetWindowDC
GetKeyState
KillTimer
DefFrameProcA
SetParent
wsprintfA
SetWindowPos
EndPaint
GetKeyboardType
GetTopWindow
GetDC
DefMDIChildProcA
BeginPaint
SetScrollRange
MoveWindow
EnumThreadWindows
GetKeyboardLayoutNameA
SetScrollPos
UpdateWindow
GetParent

Exports

Exports

_D2cvaerX@24
_qGQuDZiY@16
q5obCk3S@16
_18H7KG@24
iUbTehlF1e8n
_nJ5fZj8bYRCkQF
izYHSM
_Uvyn1J4qas
jEflHjHDiP@16
_Jfeg3o1veiT
_YS3QKKguc6Y_Q
X93EFTjfWcdz8E@4
rczvj5o4eHah@16
_EDtMxN@16
_v75fhfNpnwS@4
_o7g7eH@24
WMWtLt7a8V@8
_FQG0bU_Yx27l4@12
Oz4wdVaw@16
7PmZCcu8h
Ts2J_cUhKfajX@4
lo212SxwdC5_@12
_GHMVT21NQ@4
k5SSpg89W94pNC
gizl0l@8
xaGEUtSbTSyJN@8
LXtIWw64h@8

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a3a898aaad84051a2ac225fe198c37a

Headers

File Characteristics

Imports

gdi32

version

kernel32

user32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 143KB

.data Size: 98KB - Virtual size: 98KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 143KB

.data
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 2KB - Virtual size: 1KB