19e18b0e2c895df8b398ab3035065ef7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

19e18b0e2c895df8b398ab3035065ef7_JaffaCakes118
Size

120KB
MD5

19e18b0e2c895df8b398ab3035065ef7
SHA1

ae606c70fda504e818ebb6e0666b9920376bc894
SHA256

353d42496b8fdde6b85066545d2180a00755aa5921c9035a5b1f10ba1a85210a
SHA512

da05fe3230b51b6e9c4eab1fb4052f33f17b562aa8a748870746aa63ffdec8c3a14d2114fceaad5d684094b9521d37bae7e5d30f26bd30801a023f45c48d7402
SSDEEP

1536:ZlHpPpo03z0oHwLVLrvXe3b0IscbC9EzCJu79+EaNaBQhgj7xTOk:Zlo0D0s4ZrfeBVzNJM7+j7ck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19e18b0e2c895df8b398ab3035065ef7_JaffaCakes118

Files

19e18b0e2c895df8b398ab3035065ef7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

970f9af4ce99135fad2e79ab0eea0dc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalDeleteAtom
GetCurrentProcess
GetVersionExA
SetEvent
GetFileSize
GetOEMCP
GetACP
GetProcAddress
VirtualAllocEx
CompareStringA
GetDateFormatA
SetHandleCount
lstrcmpiA
ExitThread
CloseHandle
GetModuleHandleA
LocalAlloc

comctl32

ImageList_Draw
ImageList_GetBkColor
ImageList_Destroy
ImageList_Write

gdi32

GetBitmapBits
CreateBrushIndirect
CreateDIBitmap
GetDIBColorTable
SetPixel
CopyEnhMetaFileA
RestoreDC
GetDIBits
GetObjectA
CreatePalette

shell32

SHGetDesktopFolder
SHGetFolderPathA
SHGetFileInfoA
SHFileOperationA
SHGetSpecialFolderLocation

ole32

CoReleaseMarshalData
WriteClassStm
CoRegisterClassObject
CoFreeUnusedLibraries
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUnmarshalInterface
CoGetContextToken

version

GetFileVersionInfoA
VerFindFileA
VerInstallFileA

shlwapi

SHQueryInfoKeyA
SHGetValueA
SHQueryValueExA
PathFileExistsA
SHSetValueA
PathGetCharTypeA
PathIsDirectoryA
SHDeleteKeyA

user32

GetDlgItem
OpenClipboard
GetMenuItemID
SetClassLongA
IsWindowVisible
MessageBoxA
DefWindowProcA
CharNextA
CloseClipboard
GetMenuItemInfoA
EmptyClipboard
ShowWindow
GetForegroundWindow
WindowFromPoint
TranslateMDISysAccel
GetSysColor
OffsetRect
DrawEdge
GetDC
GetClassLongA
GetWindow
SetWindowLongW
AdjustWindowRectEx
InsertMenuA
EnableScrollBar
UpdateWindow
RegisterWindowMessageA
GetKeyboardState
EnableMenuItem
GetWindowTextA
GetWindowLongW
IsZoomed
SetWindowPos
EnumWindows
EnumChildWindows
GetPropA
GetWindowLongA
CreateMenu
SetActiveWindow
GetSysColorBrush
IsDialogMessageW
GetKeyboardType
GetWindowPlacement
GetFocus
GetScrollInfo
SetClipboardData
ShowOwnedPopups
CharLowerBuffA
PeekMessageA
CheckMenuItem
MapWindowPoints
LoadIconA
TrackPopupMenu
TranslateMessage
WaitMessage
SendMessageW
SetMenuItemInfoA
LoadCursorA
SetScrollRange
GetKeyboardLayoutNameA
SetTimer
RemovePropA
DefFrameProcA
GetKeyboardLayoutList
EndPaint
GetKeyboardLayout
IsWindowUnicode
GetClassNameA
DefMDIChildProcA
GetTopWindow
IsRectEmpty
SendMessageA
GetMenuState
GetScrollRange
SetScrollInfo
DestroyCursor
SetCapture
GetDesktopWindow
EqualRect
LoadKeyboardLayoutA
IsWindow
GetActiveWindow
InflateRect
DrawFrameControl
GetCursor
MessageBeep
InvalidateRect
SetParent
RegisterClipboardFormatA
DestroyWindow
DispatchMessageA
IsChild
SetMenu
SetRect
ReleaseCapture
FrameRect
GetIconInfo
DrawAnimatedRects
SetForegroundWindow
DrawIconEx
DrawMenuBar
GetKeyNameTextA
SystemParametersInfoA
PostQuitMessage
KillTimer
DrawIcon
SetScrollPos
PtInRect
DestroyIcon
IsIconic
SetWindowPlacement
ScreenToClient
FindWindowA
wsprintfA
MsgWaitForMultipleObjects
IsWindowEnabled
ClientToScreen
SetWindowsHookExA
GetCursorPos
FillRect
CharToOemA
DestroyMenu
GetClassInfoA
GetWindowDC
GetWindowRect
GetClipboardData
GetMenuItemCount
ShowScrollBar
SetPropA
EnumThreadWindows
MoveWindow
SetWindowLongA
IsDialogMessageA
CharNextW
ChildWindowFromPoint
SetFocus
GetMenuStringA
BeginPaint
GetWindowThreadProcessId
ScrollWindow
CreateWindowExA
DrawTextA
OemToCharA
GetSystemMetrics
DispatchMessageW
RemoveMenu
GetSubMenu
ActivateKeyboardLayout
RegisterClassA
GetDCEx
GetScrollPos
GetSystemMenu
PeekMessageW
InsertMenuItemA
MapVirtualKeyA
GetParent
GetKeyState
RedrawWindow
CallNextHookEx
UnregisterClassA
PostMessageA
GetCapture
GetClientRect
CharUpperBuffA
CreateIcon
SetCursor
LoadBitmapA
ReleaseDC
CharLowerA
UnhookWindowsHookEx
DeleteMenu
CallWindowProcA
CreatePopupMenu
EnableWindow
SetWindowTextA
IntersectRect
LoadStringA
GetMessagePos

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 926B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

970f9af4ce99135fad2e79ab0eea0dc4

Headers

File Characteristics

Imports

kernel32

comctl32

gdi32

shell32

ole32

version

shlwapi

user32

Sections

.text Size: 29KB - Virtual size: 28KB

DATA Size: 7KB - Virtual size: 6KB

BSS Size: 80KB - Virtual size: 80KB

.edata Size: 1024B - Virtual size: 926B

.data Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

DATA
Size: 7KB - Virtual size: 6KB

BSS
Size: 80KB - Virtual size: 80KB

.edata
Size: 1024B - Virtual size: 926B

.data
Size: 1KB - Virtual size: 1KB