1b8dbcb012ad36ae7158212c79196293_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1b8dbcb012ad36ae7158212c79196293_JaffaCakes118
Size

108KB
MD5

1b8dbcb012ad36ae7158212c79196293
SHA1

352a5e1eead16426a9c49f85aac0b58548139212
SHA256

dc528f2c21c2508fa7ae9f08c0fd09048c78ed8394c28c8eba8cc258b3d37a93
SHA512

62580490b4051f82a341a9966bd05f6140f1125bc6ca2f958db88bd69b8dc65c5ad514ee603c4370cc8711b9f3f9ba7b9472854674c51822b4e381e4c5167864
SSDEEP

1536:h0M1eFTl6jB4Uyk4IRi3VGnPgOf0gfQQfhp2RzQPZsd4bH3Sz:hh1exuqk4IElqsjQfhp2RRwHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b8dbcb012ad36ae7158212c79196293_JaffaCakes118

Files

1b8dbcb012ad36ae7158212c79196293_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4da67dfa24db2d6503cba52ee5d2de76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsDirectoryA

shell32

SHGetDiskFreeSpaceA

ole32

WriteClassStm
CLSIDFromProgID
CoDisconnectObject
StgCreateDocfileOnILockBytes
CoTaskMemFree
CreateStreamOnHGlobal

kernel32

SetEvent
GetModuleHandleA
WriteFile
GetACP
SizeofResource
VirtualAlloc
ExitProcess
GetDateFormatA
WaitForSingleObject
GetProcAddress
MoveFileA
FreeResource
LocalReAlloc
GetEnvironmentStrings
CreateEventA
ExitThread

gdi32

CreateBitmap

version

VerFindFileA
VerInstallFileA

user32

GetActiveWindow
GetCursorPos
CallNextHookEx
SetScrollInfo
SetForegroundWindow
CharUpperBuffA
GetMenuItemInfoA
OffsetRect
RemovePropA
SetRect
SetWindowLongW
SetPropA
OpenClipboard
DrawIconEx
MapWindowPoints
GetCursor
InsertMenuA
EndPaint
GetWindowPlacement
CreateWindowExA
GetScrollInfo
SendMessageA
GetWindowDC
CreateMenu
DeleteMenu
IsZoomed
DefWindowProcA
GetMenuItemCount
SetScrollPos
CharNextW
IsWindow
DefMDIChildProcA
GetWindow
PostQuitMessage
ShowOwnedPopups
InsertMenuItemA
GetTopWindow
GetClassInfoA
GetKeyboardState
GetWindowTextA
UpdateWindow
DispatchMessageA
GetClassLongA
GetDesktopWindow
BeginPaint
WaitMessage
CharNextA
RedrawWindow
PtInRect
GetSysColorBrush
GetClipboardData
DestroyIcon
SetClassLongA
SetWindowPlacement
InflateRect
CharLowerA
FillRect
GetFocus
SetCapture
IsWindowEnabled
GetMenuState
GetWindowRect
GetMenuStringA
ScreenToClient
SetFocus
MessageBoxA
WindowFromPoint
PeekMessageA
GetLastActivePopup
ShowWindow
IsDialogMessageW
ActivateKeyboardLayout
GetSystemMetrics
RegisterWindowMessageA
LoadIconA
UnregisterClassA
GetKeyboardLayoutList
MapVirtualKeyA
SetClipboardData
SetWindowLongA
LoadBitmapA
MsgWaitForMultipleObjects
DrawEdge
DrawFrameControl
ShowScrollBar
IsWindowVisible
GetPropA
DestroyWindow
FrameRect
CloseClipboard
GetKeyboardLayoutNameA
EnumThreadWindows
CharLowerBuffA
DrawTextA
CharToOemA

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4da67dfa24db2d6503cba52ee5d2de76

Headers

File Characteristics

Imports

shlwapi

shell32

ole32

kernel32

gdi32

version

user32

Sections

CODE Size: 29KB - Virtual size: 29KB

.data Size: 75KB - Virtual size: 74KB

DATA Size: 3KB - Virtual size: 2KB

CODE
Size: 29KB - Virtual size: 29KB

.data
Size: 75KB - Virtual size: 74KB

DATA
Size: 3KB - Virtual size: 2KB