1bbe63645c14a29a80505409cdd7d4ba_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1bbe63645c14a29a80505409cdd7d4ba_JaffaCakes118
Size

1.6MB
MD5

1bbe63645c14a29a80505409cdd7d4ba
SHA1

f7ecbf11e53c9a8e583940f0ec0772cf0dcb42f6
SHA256

4af868878abe3414d590564a373d3ca6bb18975663315fd84a65159e282004c8
SHA512

74fe4684e9431e1782d516382c43e3b9f3f99e87cc6a9f43290cd87cc3cbea4e568a0dd29054fa8ba5f095a6cead70a9e74ac5ec38c32e63280f24be6e3f279e
SSDEEP

24576:rx/dsQhy8WjupX/T9g8GTc/eEznv/J5NQt4MSze1oMme6fvTHMpcFUf8F:8UyU/T9g8GTyznv/WgeqMmcc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bbe63645c14a29a80505409cdd7d4ba_JaffaCakes118

Files

1bbe63645c14a29a80505409cdd7d4ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

457a8cf615bafbe181e0fad0bdee9e93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

InsertMenuA
GetKeyState
GetMessagePos
wsprintfA
PostMessageA
EnableWindow
ScrollWindow
GetIconInfo
SystemParametersInfoA
RegisterWindowMessageA
EnumChildWindows
CloseClipboard
DispatchMessageA
LoadCursorA
IsWindowEnabled
DefFrameProcA
GetLastActivePopup
GetKeyboardLayoutNameA
RemovePropA
IsCharLowerA
GetKeyNameTextA
GetWindowThreadProcessId
CallNextHookEx
MapWindowPoints
DispatchMessageW
SetWindowPos
SetForegroundWindow
CreateWindowExA
DestroyIcon
SetWindowsHookExA
IsDialogMessageA
GetSysColor
DrawIcon
GetDC
ClientToScreen
GetForegroundWindow
IsWindowVisible
GetFocus
UnhookWindowsHookEx
LoadBitmapA
AdjustWindowRectEx
IsZoomed

kernel32

GetProcessHeap
VirtualAllocEx
GetStdHandle
GetOEMCP
GetProcAddress
VirtualAlloc

shlwapi

PathFileExistsA
SHDeleteValueA
SHStrDupA
PathIsDirectoryA

Exports

Exports

_OljD6TDEuULR
Zn41f@4
SiQteKpr8
Zs4JOMqP3l
p59opLvaYd8z7i@24
tSsdTH
_dAgwDNknOt
_jK9WUVR8Zmh
rDpe5C@8
oFGt0fhye
PhexEq3PuMOfn
_kywDp6Ga
gtxVdgFc
_udT6lv1jLu3
mvVvv@8
y8N2a@4
_EcnhP8ZQVGbl05@12
_w9MUIh6
_v9TZ067LZ
P6CEYi
WUJPzIxpR
uW4Dy5AC2NjU
rHW3v0_R7tHFG
_5Zwjt@16
8PriwAq2IfYSVv
_WoueLttYCu3bU
_FTWoavSb9P1tA@16
_Xg0nC8c
_UB8Lqe8vr7@16
XMzfN@20
7lGIqqW5zx3t4o
_S2vz3b0
_tMPakBqgm
ltEfieqh8z
CVt6kHQu
YRlte_h
f1RifV1Ch
_tBJTc_ya7pGu
B9X25cV@12
_46zpx@12
Lz7dHw8
_S2VKAVZctmJs
5VBub
_e1K6ZU@4
_uU13U_BLpqu4
__nSuvi@20
_XQJcjdRs@4
_2yQfn3Wx3PMb@24
oIRasj_
_GDDHaz
_vZAQzQtcsDfppG

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 1024B - Virtual size: 801B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

457a8cf615bafbe181e0fad0bdee9e93

Headers

File Characteristics

Imports

user32

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

DATA Size: 1.5MB - Virtual size: 1.5MB

.tls Size: 512B - Virtual size: 4.4MB

.rdata Size: 1KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

BSS Size: 1024B - Virtual size: 801B

.RES Size: 24KB - Virtual size: 24KB

.text
Size: 8KB - Virtual size: 8KB

DATA
Size: 1.5MB - Virtual size: 1.5MB

.tls
Size: 512B - Virtual size: 4.4MB

.rdata
Size: 1KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

BSS
Size: 1024B - Virtual size: 801B

.RES
Size: 24KB - Virtual size: 24KB